Kennisbank

Overview:

This function allows you to configure two-factor authentication (2FA), a security measure for the login interface of cPanel & WHM. Two-factor authentication requires two forms of identification. After you enter your password, you must enter a security code. An application on your smartphone supplies this code. Without your smartphone, you cannot log in.

For more information about 2FA, read Wikipedia’s Two-Factor Authentication article.

Enable 2FA

If 2FA is disabled on the server, set the toggle to On to enable 2FA.

Settings

The Settings tab allows you to configure the 2FA Issuer setting. The Issuer setting determines the name that appears in the authentication app.

To set the Issuer setting for 2FA, perform the following steps:

1. Click the Settings tab.

2. Enter the desired value for the Issuer setting, or retain the default value.

   Note:

   If you do not enter a name for the Issuer setting, it defaults to the hostname.

    

3. Click Save.

Manage Users

The Manage Users tab displays the accounts for which you have configured 2FA. It also allows you to disable 2FA on those accounts.

Remove 2FA on a user account

To remove 2FA for a single user account on the Manage Users list, click Disable to the right of the user account.

To remove multiple user accounts from the Manage Users list, perform the following steps:

1. Select the Manage Users tab.

2. Select the checkboxes to the left of each user account that you want to remove. To select all accounts, select the checkbox to the left of the User heading.

3. Click the gear icon  on the top right of the list, and then select Disable Selected.

Enable 2FA on a user account

To enable 2FA for a user account, log in to the cPanel interface as the user and navigate to cPanel’s Two-Factor Authentication interface (cPanel >> Home >> Security >> Two-Factor Authentication).

You can also call API functions to access 2FA functionality. For more information, read our Guide to API Authentication documentation.

Manage My Account

The Manage My Account tab allows you to set up 2FA for the root account or a reseller account.

Configure 2FA

To configure 2FA, perform the following steps:

1. Click Set Up Two-Factor Authentication.

2. Link your cPanel account and your 2FA app:

   • To automatically create the link, scan the displayed QR code with your app.

   • To manually create the link, enter the provided Account and Key information in your app.

3. Within your 2FA app, retrieve the six-digit security code.

   Note:

   The 2FA app generates a new six-digit security code every 30 seconds.

    

4. Enter the six-digit security code in the Security Code text box.

   Note:

   You must enter the security code within 30 seconds. After time expires, the app will generate a new six-digit code.

    

5. Click Configure Two-Factor Authentication.

Remove 2FA

To remove 2FA, click Remove Two-Factor Authentication.

Reconfigure 2FA

To reconfigure 2FA, click Reconfigure. Then, follow the steps above to configure 2FA.