Expanse

Security

Protecting your account

A short, practical guide to Expanse account safety: what to protect, how to recover if something is wrong, and how teams should handle access.

Protecting your account

Your Expanse user is the key to your teams, billing, and services. This page is a compact companion to the rest of the Security section. Use it as a handout for a new mod or a second owner on the team.

The five rules

  1. One person, one login — Invite people; do not text them your password.
  2. 2FA on for anyone who can pay or add members — see Two-factor authentication (2FA).
  3. Check the URL — the panel and official sites should match the domains you expect. When in doubt, type panel.expanse.host from your bookmarks.
  4. Lock devices you use to manage hosting (PC, phone, family tablet). A logged-in session on an unlocked device is a session anyone can use.
  5. Review the team list a few times a year — Team overview — and remove people who no longer need access.

If you lose access to email or 2FA

  • Start with back-up codes if you still have them.
  • If you are completely locked out, you will need account recovery with support. Expect to prove ownership in a safe, manual way. We will not “skip” this step.

If you see charges you do not know

  • Open Billing in the right team and read Invoices. Many surprises are a new order in the other team, a renewal you did not note on the calendar, or a legitimate top-up.
  • If it still does not add up, open a support ticket with the invoice number—not your full card.