Two-factor authentication and account security

Two-factor authentication asks for a code from an authenticator app when you sign in. Owners and administrators need it before billing, member, agent or DNS changes.

Turn it on

1. Open Settings, Security, and choose Set up an authenticator.
2. Add the secret to your authenticator app.
3. Enter the six-digit code to confirm.

Sessions and tokens

Settings lists your signed-in sessions; sign out any you do not recognize. Personal API tokens let your own scripts act as you. For an AI agent, connect it under Agents instead, so it has its own identity, permissions and limits.

Losing your authenticator

A reset waits a safety period before it completes, and owners are told, so it can be cancelled if you did not ask for it.