Keep the keys to your server.

Your recovery code and your six-digit PIN have different jobs. The long code identifies your service without exposing the rest of your account. The PIN is a second check. Store both securely, and keep access to the original email address used for the purchase.

The backup code is checked first.

The recovery form asks for the backup code before showing a PIN field. An invalid backup code does not consume one of your service’s PIN attempts. A valid code opens a short-lived challenge. Successful recovery gives temporary access to that service; account changes still require the original email.

What happens after six wrong PINs?

1. Recovery locks. Existing recovery sessions are revoked and a warning is queued to your original email. The paid VPS keeps running.
2. Reset with the original email. Sign in and set a new PIN while the service still exists. Resetting also replaces the backup code and invalidates previous recovery sessions.
3. The paid period still applies. A recovery lock does not extend hosting or change its expiry. Renew the VPS before expiry to keep it running.

Keep your service paid.

Find the service period end in My servers. Renewal opens seven days before that date. Pay the new crypto invoice early enough for blockchain verification and provider confirmation to finish before expiry. We cannot debit your wallet automatically. An unpaid service may be suspended at expiry; data retention or restoration afterwards is not guaranteed.

Recovery is not a data backup.

These keys restore access to an existing service. They do not recreate files you deleted, protect an application from compromise or replace independent backups. Keep copies outside your VPS and test that you can restore them.

Keep your email available.

Use an address you can continue to access. A disposable inbox that expires can also remove your route to resetting a locked PIN. No extra profile details are requested by the account form, but the original email has a specific operational role.