Authentication Methods
Proxyon supports three authentication methods depending on your use case:
- Username and Password - Credentials generated per proxy order
- IP Whitelisting - Authorize your server IP so no credentials are needed in requests
- API Key + Session Token - For programmatic access to the Proxyon API
Username and Password
When you create a proxy order, the dashboard generates a unique username and password. Use them in the standard proxy format:
1USERNAME:PASSWORD@HOST:PORT
Residential
1USERNAME:[email protected]:1111
The username supports inline parameters for geo-targeting and session control. See the residential configuration guide for details.
Datacenter
Each datacenter proxy gets a dedicated IP with its own credentials:
1USERNAME:PASSWORD@PROXY_IP:3128 # HTTP
2USERNAME:PASSWORD@PROXY_IP:3129 # SOCKS5
IPv6 Rotating
1USERNAME:[email protected]:1080 # SOCKS5
IP Whitelisting
Instead of sending credentials with every request, you can whitelist your server IP address. Once whitelisted, all requests from that IP are authenticated automatically.
To whitelist an IP:
- Go to your proxy's management page in the dashboard
- Click "Bind IP" and enter your server's public IP
- Requests from that IP will no longer require credentials
You can whitelist multiple IPs per proxy. To remove an IP, use the "Unbind IP" option.
IP whitelisting is available for datacenter and IPv6 rotating proxies. Residential proxies use username/password only.
API Key and Session Token
For programmatic access to the Proxyon API (managing orders, checking stats, etc.):
- Get your API key from Dashboard > Settings
- Exchange it for a session token:
1curl -X POST https://api.proxyon.io/v1/auth/token \
2 -d "apikey=YOUR_API_KEY"
- Use the session token in subsequent requests:
1curl -H "X-Session-Token: YOUR_TOKEN" \
2 https://api.proxyon.io/v1/account/info
Session tokens expire after a set period. Check expiration with GET /auth/verifyToken. See the API overview for full details.
Resetting Credentials
You can reset proxy credentials at any time from the dashboard or via the API. This generates a new username and password, immediately invalidating the old ones.
Use this if you suspect your credentials have been compromised or if you need to rotate access.