Passkeys (recommended)
Register a passkey (Face ID, Touch ID, Windows Hello, or a hardware key) from your profile page. Once added, it works as a full sign-in method - no password typed at all. You can register more than one and remove any of them later.
Two-factor authentication
Standard TOTP 2FA - enable it from your profile with any authenticator app (Google Authenticator, Authy, 1Password, etc). You get a set of one-time backup codes when you turn it on; store them somewhere safe, they're the only way back in if you lose your device.
Social logins
Discord, Google, and GitHub can each be linked to your account for one-click sign-in, and unlinked again at any time from your profile - as long as you have another way to sign back in first.
API tokens
Create a personal access token from your profile to script against your own account - start/stop servers, manage backups and firewall rules, manage email domains, mailboxes and aliases, read billing, update your profile. Tokens deliberately can't do anything that risks losing access to the account itself (like changing your password or email).
| Token can | Token can't |
|---|---|
| Start/stop/restart any of your services | Change your account password or email |
| Manage backups, firewall rules, DNS | Delete your account |
| Read billing & invoices | Add or remove payment methods |
| Manage email domains, mailboxes & aliases, upgrade a mail plan | Cancel a mail plan (panel only) |
The full endpoint reference is at instantnode.eu/developers.
Support PIN
A short, stable ID shown in your dashboard header (looks like IN-XXXXX). It's how support finds your account over a ticket or a call without you sharing your email - safe to hand out, it can't be used to log in.