Users & API
Account security and two-factor authentication
Protect website and panel sign-ins, API keys and recovery material.
Website account
Use Change password in My account to replace your website password. Provide the current password and confirm the new one. A successful change signs other website sessions out. Keep the account's email access secure.
Panel identity
Use the user settings provided by the tracking panel for its own password and authentication controls. The panel password is separate from the website password; changing one does not necessarily change the other.
Enable 2FA where offered
Open the panel's user security settings and follow its two-factor setup. Scan the generated code with your authenticator, enter a current code to confirm and store any recovery material in a secure place. Verify the next login before discarding your setup information.
Protect access material
Treat installation tokens, API keys, SSH private keys and recovery codes as credentials. Keep them out of screenshots, public files, campaign URLs and shared logs. Give integrations their own scoped identities.
If access is lost
Use the supported recovery path or contact support. Keep your server provider's recovery console and backup records available. Do not disable authentication or modify database records by guesswork merely to regain access.