Account security and two-factor authentication

Your WingNode account controls billing, game servers and VPS instances. Enabling two-factor authentication (2FA) should be the first thing you do after signing up.

Enable 2FA

1. Log in to the client area and open Account → Security.
2. Click Enable two-factor authentication.
3. Scan the QR code with Google Authenticator, Authy, 1Password or Bitwarden.
4. Enter the six-digit code to confirm and save the recovery codes somewhere offline.

Best practices

• Use a unique password at least 16 characters long — a password manager is best.
• Never share panel credentials in Discord DMs or screenshots. WingNode staff will never ask for them.
• Create a separate panel sub-user for helpers instead of sharing your main account.
• Rotate SFTP passwords every 90 days, especially if you run a team with turnover.

Lost access?

If you lose your 2FA device and recovery codes, open a support ticket from an email on file. We verify identity through billing history (last four digits of payment card, last invoice number) before resetting 2FA.