Flash Sale:75% Off Hosting + Free DomainEnds in13h47m14sView Plans
Hostvento logoHostvento

Turn On Two-Factor Authentication in cPanel

This guide shows how to add a second lock to your cPanel login with a phone app.

Email1 min read14 steps4 screenshots

What is two-factor authentication?

Two-factor authentication, or 2FA, means you prove who you are in two ways. First you type your password. Then you type a short code from your phone. The code changes every 30 seconds or so. Even if someone steals your password, they cannot log in without your phone.

You need an authenticator app on your phone. Examples are Google Authenticator, Microsoft Authenticator and Authy. They are free.

Note: This feature may not be switched on for every hosting plan. If you cannot see it, ask Hostvento support.

Steps

  1. Install an authenticator app on your phone.
  2. Log in to cPanel from your client area or with the link in your welcome email.
  3. In the Security section, click Two-Factor Authentication.
  4. Click Set Up Two-Factor Authentication.
    two-factor-authentication from webmail management screen
  5. A QR code appears. A QR code is a square picture that your phone camera can read.
  6. Open the authenticator app and choose to add an account. Scan the QR code.
    authenticator app with qr code
  7. The app shows a six-digit code. Type it into the Security Code box in cPanel.
    configure two factor authentication
  8. Click Configure Two-Factor Authentication.
  9. You will see a message that it is on.

Next time you log in

  1. Enter your user name and password.
  2. Open the app on your phone.
  3. Type the current six-digit code.

Turn it off

  1. Log in and go back to Two-Factor Authentication.
  2. Click Remove Two-Factor Authentication.
Warning: If you lose your phone, you may be locked out. Write down the secret key shown during set-up and keep it safe. Support can help if you are locked out.

Quick recap

  • 2FA adds a phone code to your password.
    successful 2fa
  • Use Security, then Two-Factor Authentication.
  • Scan the QR code and type the code to confirm.
  • Keep a safe copy of the secret key.