Minecraft hosting account settings: email, password and two-factor login

Sign in and click Account in the menu on the left of the client area. On a phone, open the menu first.

When you change your name or email address, a bar appears at the bottom of the page. Click Save changes there, or Reset to go back to what was saved.

Inside the panel of a server, the account menu in the top bar has Profile and Login & security, which open these cards, and Log out. The Account tab in the panel menu can change your password too, and shows the subscription of that server.

1. Under Email Address, type the new address.
2. Click Save changes in the bar at the bottom of the page.
3. Open the email we send to the new address and confirm it, if asked.

From then on you sign in with the new address, and invoices and messages about your server go there.

1. Under Change Password, type your current password.
2. Type the new password twice. It needs at least 8 characters.
3. Click Change Password.

Do not know your current password? Sign out and use Forgot password? on the sign in page. Create an account and sign in shows each step.

The account on this page manages your server: the panel, the billing and the staff. The Microsoft account you play Minecraft with is a different one. Changing the password or email of one never changes the other, and we never need your Microsoft login to run your server.

Give the two different passwords. Then a leak of one opens nothing else, and a friend who knows your gaming login still cannot touch your server.

With two-factor login, signing in needs a six digit code from your phone on top of your password. Someone who learns your password still cannot get in. You need an authenticator app, such as Google Authenticator, Authy or 1Password.

1. Under Two-Factor Authentication, click Set up 2FA.
2. Scan the QR code with your authenticator app, or type the code under it into the app by hand.
3. Type the six digit code your app now shows in Code from your app and click Confirm and turn on.
4. Eight backup codes appear. Save them somewhere safe, away from your phone, and click I saved these, done.

The backup codes are shown only once. Each one gets you in one time when your phone is lost, broken or wiped. Print them, or keep them in a password manager.

From now on, signing in asks for the code after your password. The code also protects your account when you delete it.

Once two-factor login is on, the code is asked for at every step that could lock you out or wipe your work:

Without two-factor login, the Reset tab stops at Turn on two-step verification in your account first. A reset needs it. So turning it on is also what lets you start over with a fresh world.

A used code is gone for good, so cross it off. With only one or two left, switch two-factor login off and set it up again: you get a fresh set of eight, and the old ones stop working.

1. Keep the old phone at hand: you need one more code from it.
2. Sign in, open Account and click Turn off 2FA under Two-Factor Authentication. Type your password and the current code from the old phone.
3. Click Set up 2FA and scan the new QR code with the authenticator app on the new phone.
4. Type the code from the new phone, click Confirm and turn on and save the eight new backup codes.
5. Delete the old entry from the app on the old phone before you reset or sell it.

Some authenticator apps can carry their codes over to a new phone by themselves. Setting it up again as above works with every app, and gives you fresh backup codes as well.

Everyone you add under Staff signs in with an account of their own, and that account can reach your server too. Ask each of them to turn on two-factor login under Account the same way. A staff account without it is the easiest way in for someone who should not be there, and without it they cannot use the Reset tab either.

Give someone access to your server shows how to invite staff and choose what they may do.

• Sign in as usual. At the code step, type one of your backup codes instead of the code from the app.
• Once in, turn off two-factor login and set it up again on your new phone. You get eight fresh backup codes.
• Turning it off needs the same proof as turning it on: your password and a current code, or a backup code.
• No phone and no backup codes? Email [email protected] from the address on your account and we help you get back in.

1. Change your password under Change Password right away, to one you have never used anywhere else.
2. Change the password of your email account too, because a reset link for this account goes there.
3. Turn on two-factor login, or set it up again if it was already on.
4. Open the Activity tab of each server and look for changes you did not make.
5. Check the Staff tab of each server and remove anyone you do not know.
6. Tell us what you saw through the support page.

Under Danger Zone you can delete your account for good. This cancels every subscription and removes all your servers and their files. It cannot be undone.

1. Download anything you want to keep from your servers first.
2. Click Delete Account and read the warning.
3. We send a code to your email. Type it in, together with your password and, with two-factor login on, a code from your app.
4. Click Yes, Delete My Account.

Only want to stop one server? Cancel it in the billing portal instead and keep your account. Billing and invoices explains how.

• Download every world you want to keep first; the steps for that are in back up and restore your server.
• Download the invoices you need for your records from the billing portal, because the portal goes with the account.
• Make sure you can still read the mailbox of your account: the code that confirms the deletion is sent there.
• Every active subscription is cancelled and all server data is removed, so friends who play on your servers lose them too.

The last screen asks one more time: Are you absolutely sure? This will permanently delete your account, cancel all subscriptions, and remove all server data.