Change a widget's settings

The Settings tab of a widget holds everything about it that you can change: its name, the hostnames it works on, its mode, how it looks when your page sets nothing, whether it shows Wicket's name, and its secret key. It ends with the danger zone, where you delete the widget.

• You need the Admin or Technical role. Other roles see the same cards as plain facts, with no field, no button and no link that changes anything, and a notice, You can read these settings.
• The tab is the third tab of a widget. In the dashboard, go to Security, select Open Wicket, open the widget, then select Settings.

Each card saves on its own with Save changes, which stays greyed out until something on the card has changed. A message confirms the change, such as Name saved., and the card keeps its new values. When we refuse a change, Could not save and the card's name appear on the card, and the fields keep what you entered.

Enter a new name of up to 100 characters and select Save changes. The heading of the page changes with it. Only you see the name.

The Hostnames card has the same field as the Add a widget page. Enter a hostname and press Enter, select Add hostname, or select the x on a tag to remove it. The count under the field reads 3 of 10 hostnames, with your plan's limit for one widget, and turns red when the list is over it.

A hostname covers itself and every name under it, so example.com covers www.example.com. www.example.com does not cover example.com. When a page asks for a challenge from a hostname the widget does not list, the widget shows in the list as needing attention with Asked from a page whose hostname the widget does not list. Add the hostname here to clear it.

A name the page can tell is wrong keeps its tag, in red, with the reason under the field. A name we refuse when you save is marked the same way, with our sentence. At least one hostname must stay. Over your plan's limit, a window names the limit and the plan that raises it (Wicket limits).

Choose Managed, Non-interactive or Invisible and select Save changes. Widget modes describes each mode.

Appearance is what the widget uses when the page that shows it sets none of these itself. A setting on the page, in the snippet's data- attributes or in the script, wins.

Theme

Match the page, Light or Dark.

Size

Normal, Flexible or Compact.

Language

The visitor’s language, or one of the 18 languages the widget speaks: Arabic, Bulgarian, Czech, German, English, Spanish, French, Hindi, Indonesian, Italian, Dutch, Polish, Portuguese, Romanian, Russian, Turkish, Ukrainian and Vietnamese.

Show Wicket’s name on the widget is on by default. On a Business or Enterprise account you can switch it off and select Save changes. On any other plan the switch is locked on and the card offers the plan that unlocks it.

After a downgrade, a widget that was without Wicket's name shows it again, whatever the switch says.

The Secret key card shows the key's first characters under Starts with, when it was Last rotated, and, while the old key still works, Old key works until and the time. We keep only a fingerprint of the key, so we cannot show it again.

Rotate the key when you lose it, when someone who had it leaves, or when it might have leaked. The new key is shown once.

1. On the Secret key card, select Rotate secret key…. The Rotate the secret key page opens under the widget's tabs.
2. Choose what happens to the key you have now:
   • Keep the old key working for 2 hours, the default, so you can put the new key on your servers before the old one stops.
   • Stop the old key now, so every server still using the old key fails its checks until you update it.
3. Select Rotate secret key. Cancel, which reads Keep the current key on this page, leaves without changing it.

The page shows the new key under Save the new secret key now, hidden until you select Reveal. Select I have saved the secret key when you have copied it. Leaving by a link first asks Leave without saving the secret key?. The account owner is emailed when a secret key is rotated.

On a rotation that keeps the old key, both keys work for 2 hours, and Old key works until shows when the old one stops. Rotating again before then replaces the old key: only the key you had just before the rotation keeps working. Update your server to read the new key from its settings, which Install a widget shows.

1. At the foot of the tab, in the Danger zone, select Delete widget….
2. Type the widget's name to confirm. The comparison ignores capitals.
3. Select Delete widget.

A message confirms "Sign-up form" deleted. and the Wicket list opens. You can also delete a widget from the menu on its card in the list.

Each save shows its message, and the page's header and the cards show the new values. A rotated key shows a new Starts with and a new Last rotated.

Enter a name, such as Sign-up form.

A name cannot be empty. Use 1 to 100 characters.

Could not save the hostnames

Our reason is under the field. Remove or correct the tag it names, then save again.

Could not rotate the secret key

Our reason is on the page. The choice stays selected, so select Rotate secret key again.

Your role cannot rotate the secret key

Only Admin and Technical members rotate keys. Ask one of them.

Forms fail after a rotation

The server still sends the old key and you chose Stop the old key now, or the 2 hours ended. Put the new key in the server's settings.

• Add a widget
• Manage widgets with the API
• Widget modes
• Wicket limits

• Install a widget to put a new secret key on your server.
• Read a widget's analytics to check a change took effect.
• Troubleshoot Wicket if forms fail after a change.