Two-factor authentication adds an additional layer of security to your cPanel account by adding a second step to your login.

In addition to something you know (i.e. your existing password), it adds what is known as a possession, or second factor – based on something you possess – which in this case will be an App on your mobile phone or desktop.

Since both are required to log in, even if an attacker has your password they can’t access your account unless they also possess your phone or authentication app.

In this guide, you will learn how to configure Two-Factor Authentication for cPanel and how to log into cPanel using 2FA.

How to Configure 2FA for cPanel

Note: A smartphone device is required for setting up 2FA.

Step 1: Log in to cPanel

Step 2: In the Security section select Two-Factor Authentication:

Step 3: Click the Set Up Two-Factor Authentication button to proceed and display instructions to use the QR (Quick Response) Code or Manual Entry to configure 2FA.

QR Code Method

Step 1: You open App Authenticator and proceed to Scan the QR code displayed under Step 1.

• Google Play Link:  Here
• Link Appstore:  Here
• Chrome Link Extensions:  Here
• With Chrome you can save QRcode images. Then scan or import at: chrome-extension://bhghoamapcdpbohphigoooaddinpkbai/view/import.html?QrImport

Once the QR Code is captured on your device, a security code will be generated.

Step 2: Enter the security code (displayed in your smartphone app) under Step 2 in the box labeled Security Code. Then, click the Configure Two-Factor Authentication button.

You’ll now see a message confirming 2FA has been configured

Once the Account and Key are captured on your device, a security code will be generated.

Manual Entry Method

This case applies to the smartphone app

Step 1: Use your smartphone to manually enter the Account as it is displayed in the Manual Entry section of cPanel.

Step 2: Use your smartphone to manually enter the Key as it is displayed in the Manual Entry section of cPanel.

 

Step 3: Enter the security code (displayed in your smartphone app) under Step 2 in the box labeled Security Code. Then, click the Configure Two-Factor Authentication button

You’ll now see a message confirming that 2FA has been configured

Now that you have configured this cPanel account to use 2FA, the cPanel user will be prompted to enter the security code (generated via the smartphone app) to log into cPanel.

Enter the security code in the field labeled: “Enter the security code for {your user}”. Then, click the Continue button.

How to Remove 2FA from cPanel

Step 1: In the Security section select Two-Factor Authentication:

Step 2: Clicking the Remove Two-Factor Authentication button.

Step 3: Now, click on the Remove button.

Once 2FA has been removed, you will receive the following message:

Now that 2FA has been removed for the cPanel user, that user will no longer be prompted for a security code and can log into cPanel using simply the username and password.

Conclusion

In this article we have guided you to Configure and Use Two-Factor Authentication in cPanel, we hope this article will be useful for you, good luck!