Two-factor authentication (2FA) adds a second step to logging in. As well as your password, you enter a six-digit code from an app on your phone. Even if someone gets your cPanel password, they can't log in without your phone. We recommend turning it on.
What you need
An authenticator app on your phone, such as Google Authenticator, Microsoft Authenticator, Authy or the one built into your password manager.
Turn on 2FA in cPanel
- Log in to cPanel and open Security › Two-Factor Authentication.
- Click Set Up Two-Factor Authentication.
- Open your authenticator app, add a new account and scan the QR code on screen. If you can't scan it, type in the Account and Key shown next to the code instead.
- Enter the six-digit code from the app in Security Code and click Configure Two-Factor Authentication.
- You'll see a success message. From now on, cPanel asks for a code each time you log in.
cPanel doesn't give you backup codes. Use an app that backs up or syncs its accounts, or keep the setup key somewhere safe, such as your password manager. Then you can still get in if you lose or replace your phone.
Turn off or reset 2FA
- In cPanel, open Security › Two-Factor Authentication.
- Click Remove Two-Factor Authentication, then confirm with Remove.
Moving to a new phone? Remove 2FA, then set it up again on the new phone. If you've lost your phone and can't log in, open a ticket from the client area. We'll check it's you before we remove it.
2FA for your EDZNET client area
Your client area, where you manage billing, tickets and your services, has its own login, separate from cPanel. It can have its own two-factor authentication too. Log in, open the account menu (top right) and go to Security Settings, then follow the prompts. Keep the backup code it shows somewhere safe.
Too many failed attempts can get your IP blocked by the firewall. If that happens, see how to get your IP unblocked.
