Two-factor authentication (2FA)
Enable 2FA in cPanel with an authenticator app and protect your login even if the password leaks.
Two-factor authentication asks for a one-time six-digit code from an app on your phone in addition to your password. An attacker who learns your password but does not have your phone cannot log in.
What you need#
An authenticator app on your phone (e.g. Google Authenticator, Microsoft Authenticator, Aegis or 2FAS).
Enabling it#
- Log in to cPanel: Log in to cPanel.
- Open Security → Two-Factor Authentication and click Set Up Two-Factor Authentication.
- Scan the displayed QR code with the app. If you cannot, enter the displayed key manually.
- Enter the six-digit code from the app in the Security Code field.
- Click Configure Two-Factor Authentication.
From your next login cPanel will ask for the code after the password.
Disabling it#
In the same menu click Remove Two-Factor Authentication. We recommend leaving it on.
If you lost your phone#
Send us a ticket from your account in the client portal. For account security we may ask for extra confirmation that you own the account.
Was this article helpful?
Thanks for your feedback! Need help? Open a ticket.
Related articles
Log in to cPanelThree ways into cPanel: from the client portal, through your domain, or directly.Account security and passwordsPractical measures to protect cPanel, email and your site: strong passwords, updates and safe habits.Hacked website: what to doSteps to stop an attack, clean malicious code and prevent it from happening again.Forcing HTTPSHow to automatically redirect all visitors from http:// to https:// using cPanel or the .htaccess file.