How do I manage 2FA — enabling it, and avoiding lockout?

Two-factor authentication (2FA) adds a second step at login, so even if someone learns your password they still can't reach your servers. We strongly recommend enabling it — and setting it up carefully so you never lock yourself out.

Why enable 2FA

Your panel account controls every server on your account, so protecting that login matters. With 2FA switched on, logging in requires both your password and a short code from an authenticator app, which dramatically reduces the risk of an unauthorized login.

How it works in the client area

When you log in at https://humbleservers.com/client/login with your panel email or username, the client area asks for the 6-digit code from your authenticator app before letting you in.

How to enable 2FA

You turn your panel account's 2FA on and off in the client area:

1. Log in at https://humbleservers.com/client/login and open My Account → Security → Panel account, then choose Set up two-step login.
2. Scan the QR code with an authenticator app such as Google Authenticator or Authy.
3. Enter the generated code and your panel password to confirm and switch 2FA on.
4. Save the recovery codes shown to you somewhere safe and offline.

Warning: If you lose your authenticator device and your recovery codes, message the team from https://humbleservers.com/client/support/chat/new?direct=1 to regain access — we may ask you to verify ownership through billing.

Tips & best practices

• Store your recovery codes in a password manager, separate from the device running your authenticator app.
• Keep 2FA enabled on the email account that can reset your passwords, too — that email is a backdoor if it's left unprotected.

Frequently asked questions

I lost my device — how do I get back in? Log in to the client area with your billing email and password (or a passkey) instead, open My Account → Security → Panel account, turn two-step login off with your panel password, and set it up again with your new device. If none of that works, message the team.

Will I be notified if 2FA is disabled? Any change is recorded in your panel account's activity log. If you see 2FA disabled and didn't do it yourself, change your password and message the team right away.

Does this also protect my billing account? No — this is your panel account's 2FA. For your billing login, add a passkey under My Account → Security: it signs you in with your fingerprint, face or screen lock instead of a typed code.