How to Configure, Use, and Remove Two-Factor Authentication for cPanel

With Web Hosting Hub's Shared Hosting plans, Two-Factor Authentication, or 2FA, is enabled by default. When 2FA is enabled, the additional authentication method can be configured to add a layer of security for logging into your cPanel account.

Once configured, with your smartphone (via a third-party application, like Google Authenticator for Android, BlackBerry, and iOS or Microsoft Authenticator for Windows Phones), you will generate a secure code to authenticate your cPanel login, in addition to the cPanel user's password. In this guide, you will learn how to configure Two-Factor Authentication, use 2FA to log into cPanel, and remove 2FA from your cPanel account.

Configure 2FA

Configuring 2FA is simple via the cPanel interface. Follow the steps below to learn how to setup two-factor authentication.

1. 

   Log into cPanel.
2. 

   In the cPanel search bar, type "two".
3. 

   Click on the Two-Factor Authentication icon.
4. 

   Click the Set Up Two-Factor Authentication button to proceed.

5. Click one of the buttons below to expand and display instructions to use the QR (Quick Response) Code or Manual Entry to configure 2FA.

QR Code
1. 

   Use your smartphone to scan the QR Code displayed under Step 1.

   NOTICE: Once the QR Code is captured on your device, a security code will be generated.
2. 

   Enter the security code (displayed in your smartphone app) under Step 2 in the box labeled Security Code. Then, click the Configure Two-Factor Authentication button.

   NOTE: The security code is valid for about 30 seconds. If the code is not entered within that duration of time, the smartphone app will generate a new code, rendering the old code invalid.
Manual Entry
1. 

   Use your smartphone to manually enter the Account as it is displayed in the Manual Entry section of cPanel.
2. 

   Use your smartphone to manually enter the Key as it is displayed in the Manual Entry section of cPanel.

   NOTICE: Once the Account and Key are captured on your device, a security code will be generated.
3. 

   Enter the security code (displayed in your smartphone app) under Step 2 in the box labeled Security Code. Then, click the Configure Two-Factor Authentication button.

   NOTE: The security code is valid for about 30 seconds. If the code is not entered within that duration of time, the smartphone app will generate a new code, rendering the old code invalid.

Once successful, you will see the following message:

Now that you have configured your cPanel account to use 2FA, you will be prompted to enter the security code (generated via your smartphone app) to log into cPanel.

Use 2FA

Once you have configured your cPanel for 2FA, after entering the correct username and password combination to log into cPanel, a new page will load which prompts you to enter the new security code generated from the smartphone app (used to set up 2FA). Follow the instructions below to log into cPanel, when using 2FA.

1. 

   On the cPanel login page, enter the user name and password combination. Then, click the Login button.
2. 

   Open the smartphone app to generate a new security code.
3. 

   Enter the security code in the field labeled: "Enter the security code for {your user}". Then, click the Continue button.

   NOTE: The security code is valid for about 30 seconds. If the code is not entered within that duration of time, the smartphone app will generate a new code, rendering the old code invalid.

Remove 2FA

If for some reason you are unable to log into cPanel after enabling 2FA, you can log into cPanel through your Account Management Panel (AMP). Once logged in, you can remove 2FA for the cPanel account. The following instructions will guide you through this process.

1. 

   Log into your cPanel, via your Account Management Panel (AMP).
2. 

   In the cPanel search bar, type "two".
3. 

   Click on the Two-Factor Authentication icon.
4. 

   Click on the Remove Two-Factor Authentication button.
5. 

   Now, click on the Remove button.

Once 2FA has been removed, you will receive the following message:

Now that 2FA has been removed for your cPanel user, you will no longer be prompted for a security code and can log into cPanel using the username and password.