Most compromised servers aren't taken by a sophisticated attack, but through poorly protected access. A few habits are enough to remove most of the risk.
One password per service
Never reuse the same password across the client area, the game panel, the VPS and your other accounts. A leak on a third-party site must not open the door to your infrastructure.
A strong password is above all long: twelve characters minimum, ideally a passphrase. A password manager generates and remembers everything for you.
Enable two-factor authentication
2FA adds a temporary code on top of the password. Enable it everywhere you can: the Artaun client area, but also your Discord, GitHub and email accounts tied to your activity.
Compartmentalise access
On a game server, don't share your panel password: create a sub-user with limited permissions for each person who helps administer it.
On a VPS, work with a non-root user and reserve sudo for commands that truly need it.
Reacting to a leak
If you think an access has leaked:
- Change the affected password immediately.
- Check active sessions and sign them all out.
- On a server, inspect the connection logs.
- Revoke and regenerate the associated keys or tokens (SSH key, bot token).