How to Configure 2FA for cPanel

Configuring 2FA is simple via the cPanel interface, and provides you with better security. Follow the steps below to learn how to set up two-factor authentication.

Note: A smartphone device is required for setting up 2FA.

Step 1. Log into cPanel as the user you want to configure 2FA for.

Step 2.  In the cPanel search bar, type (Two-Factor Authentication), or Just (TWO).

Step 3. Click the Set Up Two-Factor Authentication button to proceed.

Step 4. Use your smartphone to scan the QR Code displayed under Step 1.

Notice: Once the QR Code is captured on your device, a security code will be generated.

Step 5. Enter the security code (displayed in your smartphone app) under Step 2 into the input field. Then, click the "Configure Two-Factor Authentication" button.

Alternative approach - Manual Entry Method

Step 1. Use your smartphone to manually enter the Account as it is displayed in the Manual Entry section of cPanel.

Step 2. Use your smartphone to manually enter the "Key" as it is displayed in the Manual Entry section of cPanel.

Notice: Once the Account and Key are captured on your device, a security code will be generated.

Step 3. Enter the security code (displayed in your smartphone app) under Step 2 into the input field. Then, click the "Configure Two-Factor Authentication" button.

Note: The security code is valid for about 30 seconds. If the code is not entered within that duration of time, the smartphone app will generate a new code, rendering the old code invalid.

Step 4. Once successful, you will see the following message:

How to Use 2FA to Log into cPanel

Once you have configured a cPanel user for 2FA, after entering the correct username and password combination to log into cPanel, a new page will load which prompts the user to enter the new security code generated from the smartphone app (used to set up 2FA). Follow the instructions below to log into cPanel by using 2FA.

Note: The smartphone device (and app) used to set up 2FA is required to log into cPanel after 2FA is configured for the cPanel user.

Step 1. On the cPanel login page, enter the user name and the password combination. Click the login button.

Step 2. Open the smartphone app to generate a new security code.

Step 3. Enter the security code in the field labeled: “Enter the security code for {your user}”. Click the button "Continue".

Note: The security code is valid for about 30 seconds. If the code is not entered within that duration of time, the smartphone app will generate a new code, rendering the old code invalid.

How to Remove 2FA from cPanel

If for some reason you are unable to log into cPanel after enabling 2FA, you can log into cPanel through your Account Management Panel. Once logged in, you can remove 2FA for the cPanel account. The following instructions will guide you through this process.

Step 1. Log into cPanel and use the cPanel search bar to type (Two-Factor Authentication)

Step 2.  Click on the "Remove Two-Factor Authentication" button.

Step 3. Confirm that you want to remove 2FA by clicking the "Remove" button.

Step 4. Once 2FA has been removed, you will receive the following message: