Keep your client area account secure

Protect your APEX HostMate account with a strong password, two-factor authentication and a regular check of your recent sign-ins.

1. Use a strong, unique password

Use a long password that you do not use anywhere else. A password manager makes this easy.

To change it:

1. Sign in and open Security.
2. Under Change password, enter your Current password, then the New password twice.
3. Click Update password.

2. Turn on two-factor authentication

This is the single most effective step. See Turn on two-factor authentication for your account.

3. Check your recent sign-ins

The Security page shows your Last login, the Last login IP and a list of Recent login activity, with each attempt marked Success or Failed. If you see a sign-in you do not recognise:

1. Change your password straight away.
2. Turn on two-factor authentication if it is not already on.
3. Open a support ticket so we can check your account.

Built-in protection

• Lockout after failed attempts. After several failed sign-in attempts, the account is temporarily locked.
• Automatic sign-out. Client area sessions end after 2 hours without activity.

Watch out for phishing

• Always sign in at apexhostmate.com/login. Check the address bar before you enter your password.
• Be careful with emails that urge you to "verify your account" or pay through an unfamiliar link. When in doubt, open the client area yourself instead of clicking the link, and check the invoice there.
• Protect the email account linked to your client area — anyone who controls it can reset your password.