Under Account you will find:
- Change Password - set a new one any time; you need the current password to do it.
- Security - two-factor authentication. Once enabled, signing in asks for a six-digit code from an authenticator app (Google Authenticator, Microsoft Authenticator, 2FAS and similar) on top of the password. If someone learns your password, they still cannot get in.
- Contacts and Users - people allowed to act for you (a colleague, your developer, your accountant), each with their own details.
Use a password you use nowhere else and turn on two-factor authentication. It is the single most effective thing you can do.
The DirectAdmin panel has its own sign-in and its own two-step verification - see the DirectAdmin security article.