02Account & billing
Secure your account – password, passkey and support PIN
How to protect your Nexthosting customer account with a strong password, passkey, support PIN and safe login services – and what to do about unauthorised access.
In short
Use a long password that you use nowhere else, or log in with a passkey. Only tick “Angemeldet bleiben” (stay logged in) on your own devices, do not pass on your support PIN or API keys, and renew the PIN if it has become known. If you suspect unauthorised access: change your password and write a ticket straight away.
Why this matters
Section titled “Why this matters”Orders, payments and access to your servers all run through your customer account. You must keep passwords, API keys and similar credentials secret and protect them from third parties. You are liable for actions taken through your account, within the limits of the law, if you are responsible for the misuse (AGB § 4; AGB = General Terms and Conditions).
The most important protective measures
Section titled “The most important protective measures”| Measure | How |
|---|---|
| Strong password | At least 6 characters are required – better use 12 or more, most easily with a password manager. Do not use it anywhere else. |
| Passkey | On the login page you log in with Mit Passkey einloggen (“log in with passkey”) – without a password, using fingerprint, face recognition or device PIN. |
| Secure the login services | If you log in via Discord, Google, Twitch or Steam, the security of your account depends on that service. Switch on two-factor login there. |
| Use “Angemeldet bleiben” deliberately | The tick box keeps you logged in for 4 weeks. Only tick it on your own devices, and always log out on other people’s computers. |
| Protect the support PIN | The PIN on the overview identifies you to support. Only give it to the Nexthosting team. |
| Protect your email mailbox | Whoever has your mailbox can reset your password. Secure it well too. |
Using a passkey
Section titled “Using a passkey”A passkey is a login key stored on your device or in your password manager. It cannot be guessed and cannot be captured on a fake page. To log in, click Mit Passkey einloggen at nexthosting.net/account/login and confirm on your device.
Support PIN
Section titled “Support PIN”On the overview of your account, the Support box shows your Support-PIN. It identifies you when you contact support – especially where it is not automatically clear who you are, such as by email or on Discord.
- Open the Übersicht (overview) in your customer account.
- Read the PIN from the Support box when support asks for it.
- If you passed the PIN on to someone else or posted it publicly, click Neu generieren (“generate new”). The old PIN is then no longer valid.
API keys and account access
Section titled “API keys and account access”- You find the API page in the Konto (account) area. Credentials for your own programs and scripts are as valuable as your password: do not upload them to public repositories, do not pass them on, and remove access you no longer need.
- Under Kontozugriffe (account access) you check the access to your customer account. If you find something there that you cannot place, contact support.
You do not have to share your customer account to give friends access to the game server: in the game server panel you invite them as sub-users with their own permissions. See Friends and sub-users.
Recognising phishing
Section titled “Recognising phishing”- Only log in on nexthosting.net. Check the address in the browser before you enter a password.
- Never enter your password in a ticket, an email or a Discord message.
- Be suspicious of emails that put pressure on you (“account will be deleted immediately”) and link to other sites. Real invoices and notices can always also be found in your customer account.
If you suspect unauthorised access
Section titled “If you suspect unauthorised access”- Change your password – or set a new one via Vergessen? (“forgotten?”) on the login page.
- Generate a new support PIN and remove API access you do not need, if you have set any up.
- Check linked login services and disconnect any you do not know.
- Change the password of your email mailbox, in case that is affected too.
- Write a ticket straight away and describe what you noticed. You must report security incidents and suspected unauthorised access to Nexthosting without delay (AGB § 9).
- Check your game server: review the sub-users in the panel and change the panel password. A backdoor scan helps with suspicious addons – see Tools.
Frequently asked questions
Section titled “Frequently asked questions”Can I switch on two-factor login in the customer account?
Section titled “Can I switch on two-factor login in the customer account?”For logging in without a password there are passkeys. If you log in via Discord, Google or Twitch, use the two-factor login of those services.
Is the panel password the same as the account password?
Section titled “Is the panel password the same as the account password?”No. The game server panel has its own password. You need it if you log in directly in the panel or use SFTP. See Opening the game server panel.
Will support ask me for my password?
Section titled “Will support ask me for my password?”Support does not need your password. The support PIN is used for identification. Do not give your password to anyone.