Set Up Two-Factor Authentication for cPanel
Your hosting account requires two-factor authentication. You add it to an authenticator app once, and from then on you log in with your password plus a six-digit code from the app.
What I send you
When I create your hosting account, I turn on two-factor authentication for it and send you your hosting details through a secure, one-time link. Open that link soon, because it expires. It includes:
- Your cPanel username and password
- Your two-factor setup key: a long string of letters and numbers
- Any other details for your account, such as your SSH port
The setup key is not a login code
The setup key is what you type into your authenticator app, once, to add your hosting account. You never type it into cPanel. The app then creates a new six-digit login code every 30 seconds, and that code is what cPanel asks for.
Step 1: Install an authenticator app
Any app that creates one-time login codes works. Google Authenticator is one free option (iPhone, Android). Microsoft Authenticator works too, and so do most password managers. If you already use one of these for other accounts, use the same app.
Step 2: Add your hosting account with the setup key
Step 3: Log in to cPanel
Keep your access safe
- If you use a password manager, save your cPanel password and the setup key there.
- Never share a six-digit code with anyone. I will never ask you for one.
- Got a new phone? Add the account to the authenticator app on the new phone before you reset the old one.
- Lost your phone, or the code isn't accepted? Contact me and I'll help you get back in.
Code not working?
Almost every rejected code comes down to the clock. The codes depend on the time, so check that your phone sets its date and time automatically. If it does and codes still fail, delete the account from the app, add it again with the setup key, and try the newest code.