Two-factor authentication (2FA) adds a one-time code on top of your password, so a stolen password alone can't get into cPanel. To enable it:
- Log in to cPanel and open Two-Factor Authentication (under Security).
- Click Set Up Two-Factor Authentication.
- Scan the QR code with an authenticator app like Google Authenticator, Authy, or Microsoft Authenticator.
- Enter the 6-digit code shown in the app to confirm, then save.
From now on you'll enter a fresh code from your app at each login. Keep a backup of the secret or your recovery codes somewhere safe, because losing your phone can lock you out. If that happens, open a ticket and we can reset 2FA after verifying your identity. We strongly recommend enabling 2FA on every account.
