How to log in to your EnterraHost account

To log in to your EnterraHost account you have five ways in, and any of them reaches the same account. They all start at the toolbox sign-in page. Two are passwordless. One is a password followed by a code. Two hand the whole question to somebody else.

The toolbox sign-in card. Email address and Password fields sit above a Send me a code button, with a note that a 6-digit code finishes signing in. Below it are links reading Prefer a link, Email me a sign-in link instead and Forgot your password, then New here, Create an account, then buttons for Continue with Google, Continue with Discord and Sign in with a passkey. — All five routes sit on one card. The two passwordless options are the link and the passkey.

Log in with a password and a code

This is the form you land on. Type your email address and your password, press Send me a code, and a six-digit code is emailed to you. The code is good for five minutes and it is single use.

Both halves are checked before the code is sent. A wrong password returns the same message a wrong code does, which is deliberate, because a message that distinguishes them tells an attacker which half to keep working on.

The password and the code are both rate limited per email address, and after enough wrong tries in quick succession the form asks you to wait rather than accepting another. The wait is worth taking rather than refreshing the page.

An emailed sign-in link

Under the form there is a line reading Prefer a link? Email me a sign-in link instead. It asks for an email address and nothing else. The link that arrives is valid for 30 minutes, works once, and signs you in the moment you click it.

It is the method to reach for when you cannot remember the password and you want in now, because it does not ask you for one.

A passkey

Sign in with a passkey uses the fingerprint, face or device PIN on the machine in front of you. There is no code to wait for and nothing to type from a text message.

You register a passkey after you are already signed in, not before. In account settings, under the sign-in heading, Add a passkey asks the browser to create one and names the device so you can tell them apart later. Each one is listed with the last time it was used, and each can be removed on its own.

Add a second passkey on a second device before you rely on the first. A single passkey on a phone that is lost or replaced is a single passkey.

Google and Discord

Continue with Google and Continue with Discord both sign you in through that account rather than through a code. They appear on the form when they are configured for the site, and either can be your only method if you never use the others.

When the code does not arrive

Two things go wrong in practice. The code is in a spam folder, or the address is slow rather than broken. Wait a minute before trying again, because requesting a second code does not cancel the first, and a mailbox holding three codes is harder to read than one.

If a mobile number is on your account, the code step offers Text me the code as well. That is the faster route when email is lagging. SMS codes have their own ceiling of three in ten minutes, which exists because each one costs money to send.

If neither arrives, the password route is not the only one. A sign-in link needs email too, so the genuinely useful alternatives are a passkey, Google or Discord, and any of them works without waiting for a message.

Changing your password, and resetting it if you have forgotten it

The Password card in Account settings, headed with a key icon, reading that sign-in is usually a code, a link or a passkey and that the password is the one credential you can also change here, and that changing it signs out every other device. Below it are a Send me a change code button and, when a mobile number is on the account, a Text it to my mobile instead button. — Changing it needs a code as well as your session. A browser left open on a shared machine is not enough on its own.

Your password can be replaced, and there are two paths depending on whether you can sign in.

If you are signed in, account settings carries a Password card. Send me a change code emails a code, or texts it when a mobile number is on file. Enter the code with your new password and it is done. The code is required as well as the session, so a browser left open on a shared machine cannot be used to change the password on its own.

If you cannot sign in at all, the sign-in form has a Forgot your password? link. Enter your email address and a reset link is sent, working once and expiring after 30 minutes. Opening the link asks for a new password and nothing else.

Both paths end the same way. Every other signed-in device is signed out, and the only session kept is the one that made the change. If you did not make it, that is also the signal that somebody else did, and support should hear about it.

What is waiting after you sign in

The toolbox is the client area. Tickets, invoices, orders, the services you pay for, and the panels for DNS records, EnterraMon Pro, EnterraSEO, mailboxes and mail protection all sit behind the same sign-in. If you have not created the account yet, creating one takes a couple of minutes.