Two-Factor Authentication (2FA) adds an extra layer of security to your cPanel account, ensuring that only authorized users can log in. When 2FA is enabled, you must provide both your password and a second form of authentication—typically a code from a mobile app. This guide will show you how to enable 2FA in cPanel.
Steps to Enable 2FA in cPanel
- Log in to cPanel.
- For help accessing your cPanel see Where do I log in to my hosting control panel.
- Click Two-Factor Authentication.
- Click the Set Up Two-Factor Authentication button.
- Open your chosen 2FA app (Google Authenticator, Authy, etc.).
- In the app, select Add Account (usually represented by a “+” symbol or similar).
- Use your phone’s camera to scan the QR code displayed in cPanel.
- If your device can’t scan the QR code, you can manually enter the key displayed next to the QR code into your 2FA app.
- After scanning the QR code, your 2FA app will generate a 6-digit code.
- Enter this code in the Security Code field in cPanel.
- Click Configure Two-Factor Authentication.
If the code is correct, you’ll receive a success message confirming that 2FA has been enabled for your account. From now on, every time you log into cPanel, you’ll be asked to enter your username, password, and the 6-digit code from your 2FA app.
Steps to Disable 2FA in cPanel
If you ever need to disable Two-Factor Authentication, click the Two-Factor Authentication button in cPanel and click the Remove Two-Factor Authentication button.
Common Issues and Troubleshooting
- Incorrect Time on Device: Ensure the time on your mobile device is set to automatic or matches the server’s time. Authenticator apps rely on time synchronization to generate codes, and mismatched time can cause invalid codes.
- Lost Access to 2FA App: If you lose access to your authenticator app (e.g., new phone), please open a support ticket for assistance. Our support team can help you disable 2FA so you can regain access.
