Account security, two-step sign-in and staff members

Your client area login controls billing, services and domains, so it deserves a strong password and a second step at sign-in. Everything on this page is under Account Details in the sidebar of clients.crservers.com.

Account Details has one row of tabs: Overview · Edit Details · Change Email · Change password · Security · Staff Members · Settings.

Update your details

• Overview shows the details we have on file and what each one is used for. At the bottom, Download gives you a copy of your data.
• Edit Details changes your name, company, ID number, address and phone. Invoices use these details, so keep them current.
• Settings sets the time zone and how many rows lists show.

Change your email or password

1. Open Account Details → Change Email, enter the New Email and your current Password, and click Save Changes.
2. To change the password, open Change password, enter the Old Password, the New Password twice, and click Save Changes.

Use a password you don't use anywhere else. Forgot it? See Reset your password.

Turn on multi-factor authentication

With multi-factor authentication (MFA), signing in asks for a code from an app on your phone as well as your password.

1. Install an authenticator app on your phone, such as Google Authenticator or Microsoft Authenticator.
2. Open Account Details → Security → Multi-factor auth.
3. Choose Google Authenticator. It works with any authenticator app.
4. Follow the steps on screen: scan the code with the app and enter the 6-digit code it shows to confirm.

From then on, enter the app's code each time you sign in. To turn it off, open the same tab and click Deactivate.

If you lose your phone, open a ticket or call us. For your security, we confirm that the request comes from the account owner before removing MFA.

This MFA protects the client area. The web hosting control panel has its own: see Two-factor authentication in the web hosting control panel.

Allow sign-in only from your IP addresses

Under Security → Allowed IP Access, you can limit client area sign-in to your office or VPN addresses.

1. Check Current IP Address: it is the address you are connecting from now.
2. Click Add allowed IP / range and enter a single IP, or a range such as 203.0.113.0/24.

With no rules, sign-in is allowed from any IP. Once you add a rule, sign-in from any other address is blocked, so add every address you use first. Use this only if your addresses don't change.

SSH keys

Security → SSH Keys stores your public SSH keys. Click Add new SSH key, give it a Name, paste the public key and click Submit. You can then choose these keys when you rebuild a VPS or reset its keys (manage your VPS).

Give staff members their own access

Don't share your password. Give each person who helps you (a developer, your accountant) their own login with only the permissions they need.

1. Open Account Details → Staff Members.
2. Click Add new staff member. (Invite User sends the person an email invitation instead.)
3. Enter the person's name and email, and tick what they can do: for each service and domain you choose whether they can see billing, request cancellation, open the hosting control panel, reboot or rebuild a VPS, change nameservers, and more. You can also block ticket departments.
4. Click Submit.

In the list, the ⋮ button next to each staff member has Edit contact, Login as this contact and Delete. Under Billing Contact you can choose whose details appear on invoices.

To give someone access to just the websites, create a user in the web hosting control panel instead (control panel users).

Review activity

History in the sidebar lists sign-ins, changes and actions on your account, and keeps a copy of the emails we sent you. Check it if you see something you don't recognize, and open a ticket right away.