Security

Your Rackvane account controls servers you pay for. These settings live in Account in the dashboard.

#Password

Use at least 8 characters, and something you don't use anywhere else. Passwords found in known data leaks are refused. Changing your password signs out every other device.

#Two-factor authentication (2FA)

With 2FA on, signing in also needs a 6-digit code from an authenticator app like Google Authenticator, Authy, 1Password or Bitwarden.

1. Account › Security › Two-factor authentication.
2. Scan the QR code with your app and enter the code it shows.
3. Save the backup codes. Each works once, if you lose your phone.

#Passkeys

A passkey lets you sign in with your fingerprint, face or device PIN, with nothing to type or steal. Add one under Account › Security. Your browser can offer it right in the email field on the sign-in page.

#Devices

Account › Devices lists every device signed in to your account. Sign out any you don't recognise, then change your password.

#Security emails

We email you when something important changes: a sign-in from a device you haven't used before, 2FA being turned off, an SFTP key added, or someone added to one of your servers. If it wasn't you, change your password and check your devices right away.

#Things we never do

Rackvane staff will never ask for your password, 2FA codes, backup codes or wallet keys, in a ticket, on Discord or anywhere else.