Ensuring the security of your BinaryLane account is crucial to protect your data and prevent unauthorised access. Follow these steps to further enhance your account security.


Important

If you suspect your account has been compromised, please reach out to our support team here for assistance: Submit a ticket | BinaryLane



Enable Two-Factor Authentication (2FA)

Two-step verification adds an extra layer of security for your account by requiring you to enter a verification code in addition to your username and password, when signing in to your account. Even if your password is cracked, guessed, or otherwise stolen, an attacker can't sign in without access to the verification codes, which can only be obtained via your mobile phone.

For instructions on how to set this up, refer to our Two-Factor Authentication Guide: Two Factor Authentication | BinaryLane

If your two-factor code is not accepted, or you cannot get it

  • With two-factor authentication on, the login page asks for the code from your authenticator app.

  • If the code is rejected, the page shows "Invalid verification code". It does not switch to another method by itself: check the code on the device running your authenticator app and enter the current one.

  • If you cannot get a code from the app, click "Unable to find your code?" on the login page. When two-factor authentication is on, an SMS to your mobile number is the only fallback. Email verification codes are used only on accounts without two-factor authentication.

  • Hardware security keys (such as a YubiKey) are not supported, and the SMS and email fallbacks cannot be turned off.


"Too many failed login attempts"

This message means your account has had several failed login attempts in a row, so mPanel makes you wait before the next try. Each further wrong attempt, including a wrong two-factor code, restarts and lengthens the wait. The wait applies to logging in to mPanel only: your API tokens keep working during it.


The quickest way to clear it is to reset your password:

  1. Go to https://home.binarylane.com.au/login/forgotpassword

  2. Enter your account email address and follow the link in the email we send.

  3. Set the new password. You can log in straight away afterwards.


If you did not make those login attempts yourself, after resetting your password turn on two-factor authentication (above) and log out of all active sessions (below).


Log Out of All Active Sessions

To ensure that no unauthorised sessions remain active, log out of all sessions periodically, especially if you suspect any suspicious activity:

  • Log into your BinaryLane account (https://home.binarylane.com.au/login)

  • At the top of the page, select `Account`.

  • Inside the `Security` panel, click the `Change` button next to `Password:` .

  • Scroll down until you see the `Logout all sessions` section, click the `Invalidate` button.


You'll notice that you'll be immediately logged out of your account, as this has invalidated all active login sessions, including your own.


Regularly Update Your Password


Using a strong, unique password and updating it regularly is a fundamental practice to secure your account:

  • Use a mix of letters, numbers, and special characters.

  • Do not use the same password across multiple accounts, use unique passwords instead

  • Change your password regularly to reduce the risk of compromise.


Review API Keys


API keys can provide programmatic access to your BinaryLane account. If you suspect your account has been accessed without authorisation, or if an API key is no longer required, review your API keys and remove any that are unused or unfamiliar.

  • Log into your BinaryLane account (https://home.binarylane.com.au/login)

  • At the top of the page, select `Account`, then open the `Developer API` section.

  • Delete any API keys that are not currently in use.

  • For API keys that are still needed, rotate them by creating a new key, updating the application or script that uses it, then deleting the old key.


Other suggestions


  • Ensure that the email address you're using on your account is secure and protected.

  • Confirm that the browser (and device) you're using to connect to the BinaryLane systems/services is kept up-to-date.

  • Check that your browser does not have any malicious or out-of-date extensions which could potentially steal sensitive information.


If you require assistance, feel free to submit a support ticket at our helpdesk here: Submit a ticket | BinaryLane