Password & Security ​
URL: /client/password-and-security
Change your account password and review security best practices.
Change Password ​
Enter and confirm your new password:
- Old Password (password, required) - Enter your current account password
- New Password (password, required) - Enter your new password. Click the "Generate" button to create a strong password automatically. Use the visibility toggle to show or hide the password
- New Password (Again) (password, required) - Re-enter the new password to confirm
- Password Strength - A visual indicator shows the strength of your chosen password in real time
Form button: Change Password
Contact email ​
Since panel 1.9.3, the Contact email card holds the address the panel writes to about your account. Security alerts and account notices are sent to this address, for example when the server's malware scanner finds a threat in your files or suspends your account.
Enter the address and click Save. The panel confirms with "Contact email updated." Leave the field empty to remove the address; the panel then stops emailing these notices to it. A notice that the server's malware scanner suspended your account still goes to any address that scanner holds for your account.
The same notices appear in the notification bell at the top of the client panel, whether an address is set or not. Your hosting provider can also set the address for you.
When two-factor authentication is required ​
Since panel 1.9.3, your hosting provider can make two-factor authentication mandatory for client accounts. Until you have set it up, signing in brings you to this page with the notice "Two-factor authentication is required. Set up an authenticator app or a passkey to continue.", and the other pages of the panel are not available until you have done so.
Account migration ​
Your hosting provider may move your account to another server. The Account migration section decides whether your data moves with it:
- Allow my data to be copied when my account is migrated to another server - with this on, your website files, mailboxes, and database contents move with your account. With it off, only the account settings can be moved, and your data stays on the current server.
The checkbox is on by default, and a change is saved as soon as you click it.
Password & Security Tips ​
Expand the collapsible tips for guidance:
- Protect Your Password: Never reuse passwords across platforms, don't share your password, use a password manager
- Choose a Hard-to-Guess Password: Use a mix of letters, numbers, and symbols; avoid personal information like birth dates or names
Password Generator ​
A Generate Password button creates a strong random password for the new password field.
Active Sessions ​
Active Sessions lists every device currently signed in to your account, with its IP address, the browser or device it reports, and when it was last active. The session you are using is marked This device.
- Revoke signs out one other device immediately.
- Log out all other sessions ends every session except this one, and invalidates remembered logins on those devices as well. The browser you asked from stays signed in.
Sign other devices out after using a shared computer, and again right after changing your password if you suspect someone else knew it.
Login History ​
Login History shows the most recent login attempts for your account, newest first:
| Column | Meaning |
|---|---|
| Date | When the attempt happened. |
| IP Address | Where it came from. |
| Device | The browser or client that made the attempt. |
| Result | Success or Failed. |
Failed attempts from unfamiliar addresses are common on any server reachable from the internet. Repeated failures followed by a success are the pattern worth acting on: revoke the sessions, then change your password.
The section shows the 20 most recent attempts. How long attempts are kept at all is configured by the server administrator and defaults to 90 days, so an older attempt can be gone even when fewer than 20 are listed.