How to Manage Two-Factor Authentication (2FA) in cPanel
Two-Factor Authentication (2FA) increases the security of your cPanel account by requiring another form of verification in addition to your password. That means only you can access your account and all your emails, databases, and website files. By mixing your password with a special verification code that is obtained on your mobile phone, 2-factor authentication makes managing your hosting environment much safer and more reliable.
What is Two-Factor Authentication?
Two-Factor Authentication (2FA) is a security feature that involves an additional step in the login process to further verify your identity. It consists of:
- Your password: This is your regular login credential you already use.
- Verification code: This unique code is generated by an authentication app on your mobile device.
After typing in your password, you will be asked to insert the code from your authentication app. This process ensures that only you can log into your account. 2FA greatly improves security by combining your password with a code generated on your mobile device, helping protect your data, emails, and website files.
How to Enable Two-Factor Authentication in cPanel
To enable 2FA in cPanel, follow these steps:
- Log in to your cPanel account.
- Scroll down to the Security section and click Two-Factor Authentication.

- Click Set Up Two-Factor Authentication.

- A QR code will appear on your screen.

- Open your authentication application on your device and have it ready to scan the QR code.
Setup Your Authentication App
You can enable 2FA in cPanel using any of the following authentication apps:
- Google Authenticator (Android/iOS)
- Microsoft Authenticator (Android/iOS)
- Duo Mobile (Android/iOS)
Follow the steps listed below for each app:
Google Authenticator
- Install Google Authenticator from the Play Store or App Store.
- Open the app and sign in using your Google account.
- Click the Add a code or + icon to create a new account for your cPanel login.
- Select Scan a QR code and scan the QR code appearing in cPanel.
- In cPanel, enter the 6-digit code from the app, and click Configure Two-Factor Authentication.

Microsoft Authenticator
- Install Microsoft Authenticator from the Play Store or App Store.
- Open the app, then tap Scan a QR code.
- Scan the displayed QR code in cPanel.
- In cPanel, enter the 6-digit code generated by the app and click Configure Two-Factor Authentication.
Duo Mobile
- Install Duo Mobile from either the Play Store or App Store.
- Open the app and click Set up account, then select Use a QR code.
- Scan the QR code that appears in cPanel.
- Enter the 6-digit code generated by Duo Mobile into cPanel and click Configure Two-Factor Authentication.
Managing Two-Factor Authentication
Once you have enabled 2FA, it is easy to manage:
- Go to the Two-Factor Authentication page to check your status.
- Click Remove Two-Factor Authentication, then confirm to remove 2FA.

- Refresh your authentication code or set it up on a new device using the Reconfigure Two-Factor Authentication option:

- Scan the new QR code using your authentication app.
- Enter the six-digit code generated by the app to complete the setup.

Note: Authentication codes are time-sensitive and refresh frequently for security. Most authentication apps generate a new six-digit code every 30 to 60 seconds. After scanning the QR code, be certain to enter the code quickly, as expired codes will not be accepted. If the code changes before you submit it, simply use the latest code shown in your app.
How to Log into cPanel After Enabling Two-Factor Authentication
- Go to your cPanel login page and enter your username and password.

- Once you have submitted your credentials, you will be asked to provide a six-digit authentication code generated through your authentication application.

- Open your authentication app on your device, locate the code for your cPanel account, and enter it in the verification field.
- Click Submit to finish the login process.
Note: Authentication codes change every 30–45 seconds. If the code has changed before you’ve submitted it, use the new code that is now displayed within your app.
Once verified, you will have full access to your cPanel account and can manage your websites, emails, databases, and other hosting features as usual.
Now that your authentication is enabled, your cPanel account is extensively secure with another layer of protection. Remember to keep your authenticator app up-to-date and your device secured. With 2FA active, you can confidently manage your websites, emails, and databases, knowing your account is protected at all times against unauthorized access.








