Flash Sale:75% Off Hosting + Free DomainEnds in13h47m14sView Plans
Hostvento logoHostvento

How to turn on two-factor authentication in cPanel

This guide shows you how to add a second lock to your cPanel login. Even if someone learns your password, they cannot get in.

cPanel2 min read11 steps

What is two-factor authentication?

Two-factor authentication is also called 2FA. It means you prove who you are in two ways. The first is your password. The second is a short code from your phone. A password alone is like a door with one lock. 2FA adds a second lock.

The code comes from an authenticator app. This is a free app on your phone that shows a new six-digit number every 30 seconds. Google Authenticator, Microsoft Authenticator and Authy all work.

Before you start

  • Install an authenticator app on your phone.
  • Make sure your phone clock is correct. The codes depend on the time.

Steps

  1. Log in to your cPanel account.
  2. Open Two-Factor Authentication in the Security section.
  3. Click Set Up Two-Factor Authentication.
  4. On your phone, open the authenticator app and choose to add a new account.
  5. Scan the QR code on the cPanel screen. A QR code is a square picture that your phone camera can read. If you cannot scan it, type the secret key shown on the page.
  6. The app now shows a six-digit code. Type it into the box under Security Code in cPanel.
  7. Click Configure Two-Factor Authentication.
  8. You will see a message that 2FA is on.

How to log in afterwards

  1. Enter your username and password as usual.
  2. cPanel asks for a code.
  3. Open the app and type the current six digits.

Turning it off

Go back to the same page and click Remove Two-Factor Authentication. Do this only if you must. It makes your account less safe.

Warning: If you lose your phone, you may be locked out. Write down the secret key and keep it somewhere safe. If you are locked out, open a support ticket and ask Hostvento support what they can do.
Tip: This protects only cPanel. Your Hostvento client area login is separate. You can sign in to it at the client area and look in your account settings for its own security options.

Quick recap

  • 2FA adds a code from your phone to your login.
  • Install an authenticator app first.
  • Open Two-Factor Authentication in cPanel and scan the QR code.
  • Type the six-digit code to finish.
  • Save the secret key in case you lose your phone.