Your panel account

• Your account: password, email and preferences
• Two-factor authentication and security keys
• Sessions, API keys and SSH keys
• Command snippets and keyboard shortcuts

Your account: password, email and preferences

Getting to your account settings

Click your name in the bottom-left corner of the panel. The Account page opens, with the other account pages listed in the sidebar (Security Keys, API Keys, SSH Keys and so on).

Signing in

Your game panel account is created automatically when you order a server. You can sign in with:

• Login with Paymenter: one click, using your billing account.
• Username or email and your panel password.
• Sign in with a Passkey, once you've added one. See Two-factor authentication and security keys.

Changing your password

In the Password card, enter your Current Password, then the New Password twice (at least 8 characters), and click Update.

The panel then asks whether to log out every other session. Say yes if you changed your password because you think someone else knows it.

Your panel password is also your SFTP password, so update your SFTP program too.

Forgot your password?

1. On the login page, click Forgot Password (under the username box).
2. Enter your email address and click Request Password Reset.
3. Open the email and follow the link. Enter your new password twice and click Reset Password.

No email? Check your spam folder, and make sure you used the address on your account. Still stuck? Open a ticket.

Changing your email

In the Email card, enter the New Email and your Current Password, then click Update. If a confirmation is needed, the panel says "Confirmation link sent to …". Your address changes once you click the link in that email.

Account details

First Name, Last Name, Username and Language. Click Update to save.

Changing your Username also changes your SFTP username (username.serverid), so update your SFTP program afterwards.

Preferences

• Toast Position: where pop-up notifications appear on screen.
• Start on the Grouped Servers page: open your server groups instead of the full list after login.
• Hide server addresses: blurs IPs and ports. Handy when streaming or sharing your screen.

Avatar

Upload a picture in the Avatar card and click Update, or Remove to go back to your initials.

Other account pages

Page	What it's for	Guide
Security Keys	Passkeys and hardware keys	Two-factor & security keys
API Keys / Sessions / SSH Keys	Apps, logged-in devices, SFTP keys	Sessions, API keys and SSH keys
Command Snippets / Keyboard Shortcuts	Time-savers	Command snippets and shortcuts
OAuth Links	Shows that your account is linked to Paymenter
Activity	Everything done with your account: logins, changes, API use
Importer Profiles	Saved connections for the Importer

Two-factor authentication and security keys

What this is about

Your panel account controls your servers, worlds and backups, so it's worth protecting with more than a password. Two options are available:

• Two-factor authentication (2FA): after your password, you enter a 6-digit code from an app on your phone.
• Security keys / passkeys: sign in with your fingerprint, face, phone or a hardware key, with no password needed.

You can use either one, or both.

Setting up two-factor authentication

You'll need an authenticator app on your phone, such as Google Authenticator, Microsoft Authenticator, Authy or 2FAS.

1. Click your name (bottom-left) to open Account.
2. In the Two-Factor Authentication card, click Setup Two-Factor.
3. Scan the QR code with your app (or type in the code shown under it).
4. Enter the 6-digit code from your app and your password, then click Enable.

Save your recovery codes!

You'll now be shown 10 recovery codes. Copy them and keep them somewhere safe: a password manager, or printed out. Each code works once and lets you in if you lose your phone.

You will only see these codes once. If you lose your phone and your recovery codes, you'll need to contact support to get back in.

Signing in with 2FA

After your password, enter the 6-digit code from your app and click Verify Code. Lost your phone? Click Use Recovery Code and enter one of your saved codes.

"Invalid code"? Codes depend on your phone's clock. Make sure its time is set automatically. The panel also warns you if your computer's clock is off.

Turning 2FA off (or moving to a new phone)

Click Disable Two-Factor, enter a code from your app (or a recovery code) and your password, then click Disable. To move to a new phone, disable it and set it up again on the new one.

Security keys and passkeys

A passkey lets you sign in with your device's fingerprint reader, face unlock, PIN, or a hardware key like a YubiKey. You don't type a password, and it can't be phished.

Adding one

1. Go to Account → Security Keys and click Create.
2. Give it a Name (e.g. "My laptop") and enter your password.
3. Leave Allow signing in without a username on, so you can sign in with one click.
4. Click Create and follow your browser or phone's prompt.

Using an older hardware key and setup fails? Turn Allow signing in without a username off and try again. Some keys have limited storage.

Signing in with a passkey

On the login page, click Sign in with a Passkey and follow the prompt. Or type your username and choose Use Passkey.

Turning off password login (optional)

Once you have a passkey, you can stop your password working entirely: in the Password Login card on the Account page, click Disable.

This also stops your password working for SFTP, so you'd need an SSH key for that. Make sure your passkey works before turning this off.

Lost access?

• Lost your 2FA phone: sign in with a recovery code, then set up 2FA again.
• No phone and no recovery codes: open a support ticket from your billing account. We'll verify it's you before removing 2FA.

Sessions, API keys and SSH keys

Sessions: where you're logged in

Account → Sessions lists every browser and device currently signed in to your account, with its IP address, browser and when it was last used. Your current one is marked under This Device?.

• Don't recognise one? Click ⋯ → Remove on it.
• Log Out Others signs out every device except the one you're using. Do this after changing your password, or if you've logged in on a shared computer.

See a session you don't recognise? Change your password, click Log Out Others, and turn on two-factor authentication.

API keys: letting apps control your server

An API key lets a script, bot or app (for example a Discord bot that restarts your server) use the panel on your behalf. Most people never need one.

1. Go to Account → API Keys and click Create.
2. Give it a Name, and optionally an Expires date.
3. Under Server Permissions, tick only what the app needs, e.g. just power controls.
4. Optionally restrict Allowed IPs to the address the app runs from.
5. Click Save.

The key is shown only once. Copy it straight away. Anyone with the key can do whatever you allowed it to, so treat it like a password and never share it publicly.

From a key's ⋯ menu you can Disable it, Recreate it (which makes a new key and stops the old one working), or Remove it. The API Documentation button explains how apps use the key.

SSH keys: logging in to SFTP without a password

An SSH key lets your SFTP program log in without typing your password.

1. Go to Account → SSH Keys and click Create.
2. Give it a name and paste your public key (the .pub file), or click Upload Key File.
3. Point your SFTP program at the matching private key.

Step-by-step for WinSCP and FileZilla: Connecting to your server with SFTP.

Command snippets and keyboard shortcuts

Command snippets

Tired of typing the same long console command? Save it as a snippet and insert it with a couple of keystrokes.

Creating a snippet

1. Go to Account → Command Snippets and click Create.
2. Give it a short Name, e.g. announce-restart.
3. Type the Command, e.g. /announce Server restarting in 5 minutes!
4. Eggs: pick which games it's for. Leave it empty to use it on every server.
5. Click Create.

Using a snippet

On any server's Console, type ! followed by part of the name, e.g. !ann. Pick the snippet from the list and the command is filled in. Check it, then press Enter to send.

Handy Vintage Story snippets

Name	Command
announce-restart	/announce Server restarting in 5 minutes!
day	/time set day
save	/autosavenow
backup	/genbackup
whitelist	/whitelist add (then type the name)

Keyboard shortcuts

Account → Keyboard Shortcuts lists every shortcut. You can Rebind any of them, or turn them off.

The most useful ones (Windows/Linux; use Cmd instead of Ctrl on Mac):

Shortcut	Does
Ctrl+Space	Quick actions: jump to any page or action by typing
Ctrl+S	Save (files, settings)
Ctrl+K	Search files
F2	Rename the selected file
Ctrl+F	Search the console log
↑ / ↓	Previous commands in the console
Hold S + click	Select several servers on the server list

Shortcuts sync to your account. Use the menu at the top to keep changes on Only This Device instead.