#security

A tour of every Account page in the billing panel: Personal Details, Billing Information, Security, Credits, Payment Methods and Notifications, plus language and currency.

Turn on 2FA under Account → Security in the billing panel and on the Game Panel's account security page, using an authenticator app like Google Authenticator.

Endercloud staff don't read or change your files, and every service has DDoS protection. You keep your account safe with 2FA, sub-users and your own backups.

Put your bot token in a .env file, load it with dotenv (Node.js) or python-dotenv (Python), never commit it to GitHub, and reset it at once if it leaks.

At panel.endercloud.in/account you can change your panel email, username and theme, set a password and 2FA, add SSH keys for SFTP, create API keys and check your account activity.

Turn off online-mode in the Properties tab, save and restart. Anyone can then join with any name, so add a login plugin to protect accounts.

On an offline-mode server, install a login plugin such as AuthMe or LibreLogin so nobody can join as you, and SkinsRestorer so players get skins back with /skin.

Update the system, create a sudo user, log in with SSH keys, turn on a firewall (ufw), enable automatic security updates and install fail2ban. Windows tips included.