How to Enable Two-Factor Authentication (2FA) in cPanel
Posted
Updated
ByServers9
Keeping your hosting account secure is more important than ever. One of the best ways to protect your cPanel access is by enabling Two-Factor Authentication (2FA) — an extra layer of security that requires a one-time code in addition to your password.
In this guide, you’ll learn how to enable and set up 2FA in cPanel, step by step, using any standard authentication app.
✅ What Is Two-Factor Authentication (2FA)?
2FA adds an extra layer of security by requiring:
Your cPanel password
A unique 6-digit code generated by an app on your phone
Even if someone knows your password, they won’t be able to log in without access to your mobile device.
🚀 How to Enable 2FA in cPanel
Step 1: Log in to cPanel
Go to yourdomain.com:2083 or access cPanel from your hosting dashboard.
Step 2: Go to the Two-Factor Authentication Tool
Scroll to the Security section and click Two-Factor Authentication.
Step 3: Click Set Up Two-Factor Authentication
You’ll be shown a QR code and a manual key to scan or enter into your authentication app.
📱 Step 4: Use an Authentication App
Open your preferred 2FA app on your phone. Popular options include:
Google Authenticator (Android, iOS)
Authy
Microsoft Authenticator
LastPass Authenticator
To Set Up:
Tap Add Account > Choose Scan QR Code
Scan the code shown in cPanel, or enter the manual key
The app will start generating 6-digit codes
🔐 Step 5: Enter the Code and Activate
Back in cPanel:
Enter the 6-digit code shown on your app
Click Configure Two-Factor Authentication
If successful, 2FA will be activated for your cPanel account.
🔔 You’ll now need both your password and the app-generated code to log in every time.
🔄 How to Disable or Reset 2FA
If you lose access to your device or want to disable 2FA:
Log in to cPanel and revisit the Two-Factor Authentication section
Enable biometric or PIN lock on your authenticator app
Never share your 2FA device or codes with anyone
Enabling Two-Factor Authentication in cPanel is a simple step that greatly strengthens your account security. It protects you from brute-force attacks, stolen credentials, and unauthorized access.
