Two-factor authentication (2FA) requires a one-time code from your phone in addition to your password. Even if someone steals your password, they cannot log in without your device, making 2FA one of the strongest protections for your account.
What You Need
- A smartphone with an authenticator app, such as Google Authenticator, Authy, or Microsoft Authenticator.
- Access to your cPanel account.
Enable 2FA in cPanel
- Log in to cPanel.
- Open Two-Factor Authentication under the Security section.
- Click Set Up Two-Factor Authentication.
- Scan the displayed QR code with your authenticator app.
- Enter the six-digit code shown in the app.
- Click Configure Two-Factor Authentication to confirm.
From now on, each login asks for a fresh code from the app.
If You Cannot Scan the QR Code
Most apps let you type a secret key manually:
- Copy the Account and Key values shown on the setup page.
- Add a new account in your authenticator app.
- Paste the key to generate codes.
Avoid Getting Locked Out
- Keep your phone's clock set to automatic time, as codes are time-based.
- Save backup access to your authenticator app, for example with Authy's cloud backup.
- Note that losing your device without backup may require support to reset 2FA.
If you lose access to your authenticator and cannot log in, contact support on WhatsApp at +254 796 358081 to verify your identity and disable 2FA so you can set it up again.