Two-Factor Authentication (2FA)
Two-factor authentication adds an extra layer of security by requiring a second verification method when you log in.Why Enable 2FA?
Protects against password theft or data breaches
Prevents unauthorized account access even if your password is compromised
Required for administrative accounts and high-privilege access
Takes less than a minute to enable
Setting Up 2FA
Using an Authenticator App (Recommended)
1
Go to Security Settings
Log in to dash.breezehost.xyz, navigate to Account Settings, and find “Security” or “Two-Factor Authentication”
2
Click Enable 2FA
Look for “Set Up Two-Factor Authentication” or “Enable 2FA”
3
Choose Authentication Method
Select “Authenticator App” (Time-based One-Time Password)
4
Install Authenticator App
If you don’t have one, download a free authenticator app:
- Google Authenticator (iOS, Android)
- Microsoft Authenticator (iOS, Android)
- Authy (iOS, Android, desktop)
- Bitwarden (iOS, Android, desktop)
5
Scan QR Code
In your authenticator app, select “Add Account” or ”+” and scan the QR code shown on your screen
6
Verify Code
Enter the 6-digit code from your authenticator app into the “Verification Code” field
7
Save Backup Codes
The system will provide 8-10 backup codes. Save these in a secure location. You’ll need them if you lose access to your authenticator app.
8
Confirm
Click “Enable 2FA” to activate two-factor authentication
Logging In with 2FA
Once enabled, here’s what happens when you log in:1
Enter Credentials
Log in with your email and password as usual
2
Enter 2FA Code
You’ll be asked for a 6-digit code from your authenticator app
3
Open Authenticator App
Open your authenticator app and find the code for Breeze Hosting
4
Enter Code
Type the 6-digit code into the prompt and click “Verify”
5
Access Granted
You’ll be logged in and taken to your account dashboard
Backup Codes
Backup codes let you log in if you lose access to your authenticator app. Important:- Save your backup codes in a safe location (password manager, printed paper, encrypted file)
- Each code can only be used once
- Once all backup codes are used, you’ll need to reset 2FA
Using a Backup Code
1
Go to Login Page
Visit dash.breezehost.xyz
2
Log In with Email/Password
Enter your credentials and click “Log In”
3
See 2FA Prompt
When asked for your authenticator code, look for “Use backup code” or “Can’t access your app?”
4
Enter Backup Code
Type in one of your backup codes (it may be in a format like: XXXX-XXXX-XXXX)
5
Access Granted
You’ll be logged in. One backup code has been used.
Disabling 2FA
If you need to turn off two-factor authentication:1
Go to Security Settings
Log in and navigate to Account Settings > Security
2
Find 2FA Settings
Look for “Two-Factor Authentication” or “2FA”
3
Click Disable
Click “Disable 2FA” or “Turn Off 2FA”
4
Confirm Your Password
Enter your password to confirm this action
5
Confirm Disabling
Click “Disable” to turn off two-factor authentication
Password Security
Your password is your first line of defense against unauthorized access.Password Best Practices
Use at least 12 characters (16+ is ideal)
Include uppercase letters (A-Z) and lowercase letters (a-z)
Add numbers (0-9)
Include special characters (!@#$%^&*)
Avoid common phrases, dictionary words, or personal information
Never reuse passwords across different accounts
Change your password regularly (every 90 days)
Use a password manager to generate and securely store passwords
Password Examples
Changing Your Password
1
Log In to Your Account
Go to dash.breezehost.xyz
2
Go to Account Settings
Click your profile icon and select “Settings”
3
Find Security Section
Look for “Password” or “Change Password”
4
Click Change Password
Click the “Change Password” button
5
Verify Current Password
Enter your current password to confirm your identity
6
Enter New Password
Type your new, strong password
7
Confirm New Password
Re-enter the new password to confirm
8
Save
Click “Change Password” to apply the change
Session Management
Monitor and control your active login sessions.Viewing Active Sessions
1
Go to Security Settings
Navigate to Account Settings > Security
2
Find Active Sessions
Look for “Active Sessions” or “Login History”
3
Review Sessions
You’ll see:
- Device/browser used
- Location (IP address)
- Login date and time
- Last activity
Logging Out of Other Sessions
If you see suspicious activity or want to log out all other devices:1
Go to Active Sessions
In Security Settings, find “Active Sessions”
2
Click Log Out
Next to the session you want to end, click “Log Out” or “End Session”
3
Confirm
Confirm that you want to end the session
Account Activity Log
Review everything that happens on your account for security monitoring.1
Open Account Settings
Log in and go to Account Settings
2
Find Activity Log
Look for “Activity Log” or “Account History”
3
Review Activities
You’ll see:
- Login attempts (successful and failed)
- Password changes
- 2FA changes
- Email changes
- Services created/modified
- API key creation
What to Look For
- Unexpected login locations: If you see logins from places you’ve never been
- Unexpected password changes: If someone changed your password without you
- Failed login attempts: Multiple failed attempts suggest someone trying to access your account
- Unknown API keys: Keys you don’t recognize or didn’t create
Suspicious Activity?
If you notice unauthorized activity:- Change your password immediately to a new, strong password
- Review linked accounts and disconnect anything suspicious
- Check active sessions and log out unknown devices
- Enable 2FA if not already active
- Contact support: Email support@breezehost.xyz with details
Recovery Email and Phone
Set up recovery methods for account access.Adding a Recovery Email
1
Go to Account Settings
Log in and navigate to Account Settings
2
Find Recovery Email
Look for “Recovery Email” or “Account Recovery”
3
Add Email
Click “Add Recovery Email” and enter a secondary email address
4
Verify Email
A verification link will be sent to that email. Click it to confirm.
Use a recovery email that’s separate from your primary account email. This ensures you can regain access even if your main email is compromised.
Account Compromise
If you suspect your account has been compromised:Immediate Actions
1
Change Your Password
Use a different device if possible. Create a new, strong password.
2
Enable 2FA
Set up two-factor authentication if not already enabled
3
Review Sessions
Check active sessions and log out all devices except the one you’re on
4
Check Linked Accounts
Disconnect Discord or other integrations if they seem suspicious
5
Review Activity Log
Look for any unauthorized changes or access
Contact Support
If you can’t regain control of your account:- Email support immediately: support@breezehost.xyz
- Use a different email: If your account email is compromised, contact from a different address
- Provide details: Explain what happened and what suspicious activity you noticed
- Our team will help: We can verify your identity and help secure your account
Security Checklist
Use this checklist to ensure your account is properly secured:Security Checklist
Security Checklist
Strong, unique password (12+ characters, mixed case, numbers, symbols)
Two-factor authentication enabled
Backup codes saved in a secure location
Recovery email address configured
No unnecessary linked accounts (Discord, etc.)
Regular password changes (every 90 days)
Reviewed activity log recently
All active sessions are recognized
No suspicious API keys
Updated contact information in case of account issues
Additional Security Resources
- Password Manager: Use tools like Bitwarden, 1Password, or LastPass
- Authenticator App: Google Authenticator, Microsoft Authenticator, or Authy
- Email Security: Keep your primary email secure as it’s used for account recovery
- Device Security: Keep your computer and phone updated and protected with antivirus software
Need Help?
For security concerns or assistance:- Discord: Open an urgent ticket in our support server
- Email: support@breezehost.xyz - mark as “Security Issue”
- Immediate assistance: Contact support immediately if you suspect a breach