Turn On Two-Factor Authentication for the Control Panel

Two-factor authentication (2FA) asks for a six-digit code from an app on your phone each time you log in to the web hosting control panel, on top of your password. If someone gets your password, they still can't log in without your phone.

2FA is set per panel user. If you created extra users for a developer or a colleague, each one turns it on from their own login.

Before you start

Install an authenticator app on your phone: Google Authenticator, Microsoft Authenticator, 1Password, Authy, or any app that reads QR codes for 2FA.

Turn on 2FA

1. Open the hosting control panel from the client area.
2. In the side menu, open Administration → Authentication.
3. Under Two-Factor Authentication, click Generate. A QR code appears.
4. In your authenticator app, add an account and scan the QR code.
5. Type the code the app shows into Authentication Code.
6. Click Save.

From the next login on, the panel asks for the code after your password. Codes change every 30 seconds; type the one on screen now, not an old one.

Turn off 2FA or move it to a new phone

1. Log in to the panel (with your current code).
2. Open Administration → Authentication.
3. Click Delete to turn 2FA off.
4. To use a new phone, click Generate again and scan the new QR code with the new phone.

Do this before you wipe or hand in your old phone.

If you lost your phone

You can't turn 2FA off without a code. Open a ticket from the client area and tell us the domain and the panel user. For your security, we confirm the request comes from the account owner before we remove 2FA.

Keep your client area safe too

The panel and the client area are separate logins. Use a strong, unique password for each (see password requirements) and don't share them. To give someone access to the panel, create a user for them instead.