panel.dreamhost.com is protected by a 2FA token, but the dreamcompute management UI is not. support@dreamhost suggested posting it here.
For the application(s) running on my dreamcompute instances, I have 2FA set up. I can set up firewall rules and restrict access to the applications by netblock. I could even put the applications behind a VPN. But if someone can get into the management side with a u/p, the extra layers of application-level protection aren’t that useful.
It would be really great if I could protect the management UI with 2FA.