Passkeys (recommended)
Register a passkey (Face ID, Touch ID, Windows Hello, or a hardware key) from your profile page. Once added, it works as a full sign-in method - no password typed at all. You can register more than one and remove any of them later.
Two-factor authentication
Standard TOTP 2FA - enable it from your profile with any authenticator app (Google Authenticator, Authy, 1Password, etc). You get a set of one-time backup codes when you turn it on; store them somewhere safe, they're the only way back in if you lose your device.
Social logins
Discord, Google, and GitHub can each be linked to your account for one-click sign-in, and unlinked again at any time from your profile - as long as you have another way to sign back in first.
API tokens
Create a personal access token from your profile to script against your own account - start/stop servers, manage backups, read billing, update your profile. Tokens deliberately can't do anything that risks losing access to the account itself (like changing your password or email).
| Token can | Token can't |
|---|---|
| Start/stop/restart any of your services | Change your account password or email |
| Manage backups, firewall rules, DNS | Delete your account |
| Read billing & invoices | Add or remove payment methods |
Support PIN
A short, stable ID shown in your dashboard header (looks like IN-XXXXX). It's how support finds your account over a ticket or a call without you sharing your email - safe to hand out, it can't be used to log in.