Your account

Your account settings hold the things that belong to you, not to one server. Open them with Account at the top of the panel.

Profile

Your email (and whether it is verified), a display name your team sees (not your real name), and the look: dark, light, or matching your device.

Password

Change password needs your current password and a new one of at least 10 characters. Changing it signs you out everywhere else.

Making an account

You can sign up with an email address and a password, or with Discord. We only ask for what we need to run your account: no real name, no age and no phone number. You must be 13 or older to make an account, as our terms say.

• Email and password. Pick a password of at least 10 characters. Several unrelated words work well. We refuse passwords that are easy to guess, such as common passwords or ones built from your email address.
• Discord. Press Continue with Discord and approve. We only read your Discord user id and email. A friend's invite link works with Discord too. If Discord has confirmed your email, it becomes your account email and counts as confirmed. If Discord has not confirmed it, we do not keep it: add an email under Account, Security and open the link we send.
• Throwaway email services are not accepted, and one email address can only have one account.

Confirming your email

We send a link to your email when you sign up. You need a confirmed email before you can make a server. Until your email is confirmed you also cannot link Discord, turn on two-factor sign-in or add alerts. The link works for 1 hour. If it runs out, sign in and press Send the link again.

Signing in

• If you type the wrong email or password, we say so without telling you which one was wrong. That stops strangers from checking whether an email has an account.
• After many wrong tries, sign-in slows down for a few minutes. Your account is never locked for good.
• When you sign in from a new device or place, we send you an email. If it was not you, sign that session out and change your password.
• If several wrong two-factor codes are typed after your password, we email you: someone may know your password. Change it and sign out everywhere.

Confirming it is you

Risky changes ask you to confirm it is really you, even though you are signed in: changing your email or password, turning two-factor on or off, linking Discord, connecting an AI, letting your AI do something without asking, deleting a server or your account, and making SFTP passwords. You type your password, and the code from your authenticator app when two-factor is on. That counts for 15 minutes, on this device only. If you signed up with Discord and have neither a password nor two-factor, sign in again instead; that also counts for 15 minutes.

Forgot your password

1. On the sign-in page, choose Forgot your password.
2. Type your email. We send a reset link if the email has an account (the page says the same either way).
3. The link works for 1 hour and only once. Pick a new password.

Resetting your password signs you out everywhere and disconnects your AI apps' current access, so you will need to approve your AI app again. Any other link we emailed you that you have not opened yet stops working too, including a change of email that is still waiting.

If your email was never confirmed, the reset link is the first proof that the mailbox is yours. So the reset also confirms your email and removes everything else that was tied to the account before: linked Discord, two-factor, alert channels, linked Minecraft accounts, connected AIs, the Allow, Ask or Block choices for what your AI may do across the account (such as making a server), and the invite the account was made with. That way, if someone else made an account with your email, they lose every way back in.

Changing your password or email

• Password: under Account, Security, type your current password and the new one. Your other sessions are signed out, and an email change that is still waiting for its link is cancelled.
• Email: type the new address and your password. We send a link to the new address; the change happens when you open it. Your old address gets a note that it changed, and any password reset link sent to the old address stops working.
• With two-factor on, your current password is enough for both: you already gave a code when you signed in.
• If you signed up with Discord and have no password yet, sign in again first. Either change works for 15 minutes after a fresh sign-in.

Two-factor sign-in

Two-factor sign-in asks for a code from an authenticator app each time you sign in, on top of your password. We recommend it, because your servers and your AI connection hang off this account.

1. Press Set up two-factor.
2. Scan the code with an authenticator app on your phone, or type the setup key shown beside it.
3. Type the six-digit code it shows and your password, and press Turn on. (Without a password, sign in again first.)
4. Save your ten recovery codes somewhere safe; Download as a file helps. Each works once. They are how you get back in if you lose your phone. They are shown only once.

Turning two-factor on signs out your other sessions. You can make new recovery codes (the old ones stop working) or turn two-factor off; both need a code from your app.

Where you're signed in

The list shows every place you are signed in, with the device and when it was last used. Sign out ends one. Sign out everywhere else ends all but this one; tick Also disconnect every AI to cut your AI connections too.

Signing out everywhere else also cuts your AI apps' current access, so each one asks you to approve it again, and any password reset or email change link we emailed you that you have not opened yet stops working. The link that confirms your email keeps working. Your AI apps stay listed under Connected AIs unless you ticked the box. Sessions end by themselves after 7 days without use, or 30 days at most.

If you cannot sign in

Use one of your recovery codes. Our staff cannot skip this step because of an email request.

Sign-in methods

You can link Discord to an account you made with email (Account, Sign-in methods, Link Discord), once your email is confirmed. Linking only happens from here, while you are signed in: signing in with Discord never joins an existing account by itself. It needs a sign-in, or a confirm with your password, from the last 15 minutes, and we email you when Discord is linked. You can unlink Discord too, as long as you have a password, so you can still sign in.

If you press Cancel on Discord's page, you come back to the sign-in page and nothing changes. If the account your Discord belongs to is being deleted, Discord sign-in says so and does not make a new account.

Connected AIs

Every AI app connected to your account, when it was connected and last used, and Disconnect. Disconnecting cuts it off at once. Below the list, On your account sets what your AI may do that is not about one server, such as making a new server (it starts on Ask). See Connecting your AI.

Minecraft account

Link your Minecraft account to be made op on your own servers and to use the owner menu in game. Press Get a link code, then join the hub or your own server and type the /claim command it shows in chat. See Linking with /claim.

Who can see your account

Our staff have roles. Support staff can see servers and reports but not billing, and see email addresses partly hidden. Only admins see billing. Staff can look at your panel as you to help you, and every use is logged.

Alerts

Choose where we tell you about crashes, AI requests waiting, player reports and more: a Discord channel (paste its webhook link) or email. Pick which alerts each one gets, turn it on or off, or Send a test. See Alerts.

Help bot memory

The help bot on our site remembers your past chats while you are signed in, so it can help better. Help bot memory lists them: Read one, Forget one, or Forget all chats. Chats are deleted with your account and included in your data download.

Download your data

Prepare download packs your account details, your servers' worlds, configs and your own plugins, and your help bot chats into one download. Our own premade setup plugins stay behind because they only work on our network, but their data (balances, homes, kits and the like) is written out in a readable form.

Delete your account

Delete account asks you to type delete my account, your password and, if it is on, a two-factor code. Credits are lost.

What happens:

• You are signed out everywhere at once and your AI apps are disconnected.
• Your servers are archived first. Archived worlds are kept in cold storage, not deleted.
• Then we remove your personal details: email, password, two-factor, linked accounts, sessions and alert channels. The activity log of your servers is kept for its usual year under a stand-in name, so the history of those servers still makes sense, but it no longer points at you.
• We send one last email to say it has started.

This cannot be undone.

If you want a world erased for good, write to us.