Back
Panel Basics

Enable two-factor authentication (2FA)

Protect your Victus control-panel account with an authenticator-app TOTP code, save your recovery codes, and understand how 2FA relates to your billing login.

2fatwo-factortotpsecurityauthenticatoraccount

Two-factor authentication (2FA) adds a second step to signing in: after your password you enter a 6-digit code from an authenticator app on your phone. Because your account controls real servers, files and a credit balance, enabling 2FA is one of the most valuable five-minute jobs you can do.

What you need

  • An authenticator app that generates TOTP codes — Google Authenticator, Authy, Microsoft Authenticator, 1Password, Aegis or similar.
  • Your phone (or the app on your computer) available at each login.
  • A safe place to store recovery codes — a password manager or an offline note.

Turn on 2FA in the panel

  1. 1Sign in to control.victuscloud.com and open your account settings (your profile / account menu, usually top-right).
  2. 2Find the two-factor authentication / security section and start the setup.
  3. 3Scan the QR code with your authenticator app (or type the shown secret key into the app manually).
  4. 4The app now shows a rotating 6-digit code. Enter the current code back in the panel to confirm the app is synced.
  5. 5Save the recovery codes the panel gives you somewhere safe — you will need them if you lose your phone.

Save your recovery codes now

Recovery codes are the only way back in if you lose access to your authenticator. Store them in a password manager or print them. Without them, regaining access requires a support ticket and identity checks — and there is no guarantee.

Logging in with 2FA on

From now on, after entering your password you will be prompted for the current 6-digit code from your app. The code rotates every 30 seconds; if one is rejected, wait for the next one and make sure your phone’s clock is set to automatic (TOTP is time-based, so a wrong clock breaks the codes).

Panel vs billing accounts

Your Victus identity spans the control panel and billing (SSO). Enable 2FA on the account you actually log in with. If both the panel and billing offer a 2FA option, turning it on wherever it is available strengthens the whole account — never disable it just to make login quicker.

Lost your device?

Use a saved recovery code to log in, then remove and re-add 2FA with your new device. If you have neither the app nor recovery codes, open a support ticket from an email the account recognises.

Related in Panel Basics

Logging in and SSO from the websiteHow single sign-on links your Victus billing account to the control panel, how to jump straight from the store to a running server, and what to do when a session gets stuck.Navigating the panel and server tabsA tour of the Victus control panel dashboard, the power controls, and what every tab on a game server does — Console, Files, Databases, Schedules, Users, Backups, Network, Startup and Settings.Create client API credentialsGenerate a personal client API key in the Victus control panel to automate your own servers, restrict it with an allowed-IP list, and keep it secret.Change server startup variablesUse the Startup tab to change a game server’s version, JAR/build, memory and other startup variables safely, and understand when a change triggers a reinstall.Server states explained (installing / offline / starting / suspended)Understand every status your Victus server can show — Installing, Offline, Starting, Running, Stopping and Suspended — what each means, and what to do about it.