Keeping your account secure

Short version: use a strong, unique password, turn on two-factor authentication with an authenticator app, and sign out sessions you don't recognise. All of it lives under My account, on the Security tab.

Traffic sent with your credentials counts as your traffic, even if someone else got hold of them. So this matters.

Turn on two-factor authentication

1. Open the menu under your email, click My account, then the Security tab.
2. Under Two-factor authentication, next to Authenticator app, click Set up.
3. Scan the QR code with an authenticator app on your phone. Can't scan? Use the setup key or the link shown instead.
4. Type the six-digit code the app shows and click Turn on.

From now on, logging in asks for a Verification code from the app after your password.

Keep access to that app. If you lose your phone or the app, you'll need support to get back in: email support@proxymonkey.io from your account's address.

To switch it off, go back to the same place, click Manage and choose Turn off two-factor authentication. You'll need your current password.

Change your password

On the Security tab, under Password, click Change password, enter your current password and the new one twice, then Save password.

Forgot it? Log out and use Forgot your password? on the login page.

Sign out other sessions

Logged in somewhere you shouldn't be, or on a shared computer? On the Security tab, under Where you are signed in, click Sign out everywhere else.

Your proxy credentials are separate

Your proxy username and password aren't your login. If you think one has leaked, open the proxy and use Generate a new password, if the proxy offers it. Anything using the old one stops connecting straight away. See Username and password: getting the proxy URL right.

API keys

API keys can act on your account. Keep the secret out of code you share, and delete any key you don't use. See API keys.

Need to change the email you log in with? See Changing your email or closing your account.

We'll never ask for

Your account password, proxy password, two-factor codes, API secret or full card number. If someone claiming to be us asks, it isn't us.