Your GuavaHost account controls every file, backup, and setting on your server, so protecting it with a strong, unique password and careful login habits is the single most important security step you can take.
Why the account matters so much
Whoever can log in to your game panel has full control. They can browse and delete files on the Files tab, wipe or restore snapshots on the Backups tab, change your startup settings, or even reinstall the server. Your billing account at guavahost.com/account can change or cancel services. No DDoS protection or whitelist helps if an attacker simply signs in as you, so the password is the real front door.
Build a strong password
A good password is long and unique before it is complicated:
- Make it long. A passphrase of four or five random words is both strong and easy to remember.
- Make it unique. Never reuse the password from your email, your game account, or another site.
- Avoid the obvious, such as your username, your server name, or password123.
- Use a password manager to generate and store a random password so you never have to memorize it.
Reusing a password is the most common way accounts get taken over, because one leak from an unrelated website hands attackers your login everywhere.
Never share your login
Do not give your master password to co-owners or staff. If someone needs access to help run the server, hand it out through in-game roles and permissions rather than your account credentials, and keep the top-level login to yourself. Sharing a password means you can no longer tell who made a change or undo it cleanly.
Watch out for phishing
Attackers often skip the password entirely and just trick you into typing it. Stay safe:
- Only ever enter your login on the real sites: guavahost.com and the game panel you open from there.
- Be suspicious of Discord DMs or emails claiming to be staff and asking you to "verify" your account on a link.
- GuavaHost staff will never ask for your password.
Protect both accounts
Remember you have two logins worth guarding: the billing client area at guavahost.com/account and the game panel itself. Give each a strong, separate password.
If you think you have been compromised
- Change your password immediately from a device you trust.
- Check the Console and Files tabs for anything you did not do.
- Restore a clean snapshot from the Backups tab if files were changed.
- Contact support through a ticket or Discord so the team can help you lock things down.
Still stuck? Jump into our Discord at discord.gg/GuavaHost and the team will help you out.