How to Enable Two Factor Authentication from cPanel and WHM?

Introduction

The first security measure is to use a strong password; yet, the accounts can be compromised and hacked. Two-Factor Authentication (2FA) is an additional security measure. cPanel supports 2FA and makes your account much safer. This guide describes the meaning of 2FA and the process of enabling it on both WHM and cPanel accounts.

What is Two-Factor Authentication (2FA)?

Two-Factor Authentication (2FA) is a security procedure that involves two verification factors to prove their identity.

This method is much better for protecting a user’s login credentials.

The first factor is something that you are aware of (your password). The second is something you have, typically a security token or a six-digit code that is created by a mobile application such as Google Authenticator or Duo Mobile.

How to Enable 2FA in WHM and cPanel

2FA is easy to set up in WHM and cPanel. To start with, download a mobile authenticator application on your phone. Install Google Authenticator or Duo Mobile from your app store.

Enabling 2FA in WHM

Log in to WHM as the root user.
Use the left side search box and enter Two-Factor Authentication or 2FA.
Toggle on the ‘Two-Factor Authentication Security Policy’ by means of the on/off button.
(Optional) In settings, you can give a specific name to the issuer for 2FA. The server name is the default. Click Save after any changes.
Click “Manage My Account.” In case 2FA is not enabled, the status will show ‘Not Configured’.
Click Two-Factor Authentication.

The first step will show a QR code. Scan it using your mobile authenticator.

The second step will display a six-digit code that will be changed every 30 seconds. Type this code in the Security Code field.

7.Click Configure Two-Factor Authentication to complete.
8.Test the login: log out, and log back in as root. The security code will be asked for. You need to enter the six-digit code from your mobile app, and you will then be logged into WHM successfully.

Enabling 2FA in cPanel

Log in to the cPanel account of the user.
Click on the Security section, and then on Two-Factor Authentication.
In case 2FA has not been set up, then click on “Set Up Two-Factor Authentication.
Step one displays a QR code. Scan it with your authenticator app.
Step two will require the existing six-digit code of the app. Enter the Security Code field.
Click Two-Factor Authentication.

Hosting Solutions at Cantech

Cantech web hosting of all types values and prioritises your account security.

Powerful Security Solutions – We provide full support for 2FA to secure your hosting and server management accounts.
Reliable cPanel/WHM – Our hosting environment ensures that security features like 2FA integrate and work perfectly.
24/7 Support Assistance – Our team can assist in case you have any problems with implementing or using 2FA.

Conclusion

Two-factor authentication is an easy but effective security tool that can be enabled. It reduces the chances of unauthorized access greatly. You can now activate 2FA with just a few clicks in both your cPanel and WHM systems.

FAQs About 2FA

What happens if I lose my phone with the authenticator app?

You need to use a backup recovery code or contact your hosting provider immediately. They can turn off 2FA on the server side so that you can regain access.

Does 2FA require an internet connection on my phone?

No. The authenticator application generates the codes locally using time-based algorithms.

Is 2FA mandatory for all cPanel users?

Not for individual accounts. Nonetheless, it can be applied as a security policy in WHM by a server administrator.

Can I use different authenticator apps for 2FA?

Yes. The cPanel 2FA system is based on a standard protocol, and therefore any compatible application (e.g., Google Authenticator, Duo Mobile) can be used.

How often does the 2FA security code change?

The six-digit security code changes frequently. A new, unique code is generated every 30 seconds for security purposes.