Independent hosting operator since 2014 · New York · Dallas · Amsterdam Status Looking Glass Contact
D4 NetworksD4 Networks
Client area Deploy a server
Home / Resources / Secure your control panel account

Guides

Secure your control panel account

May 27, 2026 · 2 min read

The control panel behind Log In To Panel has its own account settings, and a few minutes there make your servers harder to take over. This guide covers two-factor authentication, SSH keys, and API tokens.

1. Open the Account page

In the client area, open any service and click Log In To Panel under Service actions. In the control panel sidebar, click Account. You will see four tabs: Settings, API Tokens, SSH keys, and Two-factor authentication.

2. Turn on two-factor authentication

Open the Two-factor authentication tab. Scan the QR code with any TOTP app (for example Google Authenticator or Microsoft Authenticator), or copy the secret key into the app by hand. Enter the code the app shows and click Enable.

From then on, a login needs both your password and a current code from your app. This blocks almost all account takeovers, because a stolen password alone is no longer enough.

3. Add your SSH keys

Open the SSH keys tab and click Add SSH Key. Paste your public key and give it a name, or use Generate a new key pair if you do not have one yet.

Keys stored here appear as an option when you reinstall a server. Select your key during the reinstall, and the fresh system comes up ready for key login, so you never have to copy keys over by hand.

4. Manage API tokens

The API Tokens tab creates tokens for scripts and automation. Click Generate API Token and copy the token right away.

The token is shown only once

For security reasons, the panel never shows a token again after you close the dialog. Store it in a password manager. Treat it like a password: anyone who has the token can control your servers. Delete tokens you no longer use with the trash icon.

5. Set a strong password

The Settings tab changes your panel password. It must have at least 8 characters, 1 uppercase letter, and 1 number. Use a password manager and do not reuse a password from another site. Note that this password is for the control panel; your client area login at my.d4networks.com is a separate account with its own password.

Quick reference

TaskWhere
Two-factor authenticationAccount, Two-factor authentication tab
Store SSH keysAccount, SSH keys, Add SSH Key
Use a keySelect it during a reinstall
API tokensAccount, API Tokens; shown once
Panel passwordAccount, Settings

Where to go next

With the panel account locked down, secure the servers themselves with our guide on the first ten minutes on a new VPS.

security 2fa ssh keys api tokens

Related articles