Securing your account
Password, passkeys, two-factor authentication and linked devices — the right settings and the right habits.
Updated on September 24, 2026 by joueur-1800bd0d2 min readContents
Your website account carries your game identity, your messages, your purchases and your rank. This page gathers everything that protects it. Everything is set in Settings › Security.
Your password
- At least 10 characters, and avoid common or obvious passwords.
- Don't reuse the one from your Minecraft account, your e-mail or another game.
- Change password (section of the same name) asks for your current password. After the change, all your other sessions are signed out: handy if you have a doubt.
- Forgot it? "Forgot password?" on the sign-in page sends you a reset link by e-mail.
Passkeys
A passkey signs you in without a password, using your device's fingerprint, face or PIN. It can't be phished: it only works on the real PVPFACTION website.
- Adding a passkey: Passkeys section, "Add a passkey" button, then follow your browser's instructions. Give it a name so you recognise it ("Living room PC").
- A synced passkey (your phone's or browser's password manager) follows you across devices; a passkey bound to this device only exists there.
- You can register up to 10 passkeys, and remove one at any time.
- Signing in with a passkey doesn't ask for a two-factor code: the passkey already counts as two factors.
Tip — If your browser doesn't support passkeys, the website tells you: use your password and two-factor authentication instead.
Two-factor authentication
The best companion to a password: a 6-digit code from an app on your phone, and 10 recovery codes. It can also protect your login to the game server. Everything is explained on Two-factor authentication.
Your linked devices and apps
Settings › My devices lists the apps allowed to access your account: the mobile app, the desktop voice chat app, the voice mod… Each one is authorised with a pairing code shown by the app, which you approve on the website.
Each device has a scope:
| Scope | What it allows |
|---|---|
| Voice only | joining voice chat under your identity |
| Voice + game info | voice chat, and reading your player and faction (without being able to write or do anything) |
| Full account | everything you can do on the website (this is the case for the mobile app) |
Careful — Only approve a code if you just launched the app yourself. A "Voice" token joins voice chat under your identity: it hears the players near you.
- Revoking a device removes its access immediately (lost phone, borrowed PC…).
- You can also create a token to paste into an app: it's shown only once, and expires after 90 days without use.
Good habits
- Never give your password, a two-factor code or the 4-digit linking code to anyone, even someone claiming to be on the team.
- Beware of links sent in private messages that imitate the website: check the address
pvpfaction.netbefore signing in. - In doubt? Change your password (your other sessions are closed), revoke the devices you don't recognise, and turn on two-factor authentication.