How to setup Two-Factor-Authentication in cPanel
Requirements:
- Mobile Phone, PC or Laptop or all of the above.
- App for generating your 2FA passes. i.e. Google Authenticator (Android/iPhone), Auhty (Android/iPhone/Apple/Windows), WinAuth (windows)
How it works:
By enabling Two-factor authentication (2FA) you will have to provide a unique time based token next to your userid and password; so even if someone knows your userid and password they still would not have access to your cPanel as they need a time based token, which will change every minute.
In this example we will be using Authy as an example as it will run on all type of computers and phones, and makes it possible to actually make a backup of your keys. (something which google authenticator can't do, and can become a pain if your phone breaks, is lost or stolen).
Download link to authy: https://authy.com/download/ [external link you will leave 040support.nl ]
A guide to 2FA, why should you use it can be found here: https://pixelprivacy.com/resources/two-factor-authentication/ [external link you will leave 040support.nl ]
Step 1:
Login to cPanel
Step 2:
Go to the 'Security' block
Step 3:
Click Two-Factor Authentication
Step 4:
The following message will appear: Two-factor authentication is not configured for your account.
click the button "Set Up Two-Factor Authentication"
Step 5:
If you installed Authy on your phone, start it click the right top 3 dots and choose "Add Account" from the screen.
Click : Scan QR code or Enter Key Manually
If Scan QR code, simple hold your camera infront of your screen and scan the QR code cPanel shows; give it a name you can remember
If you choose Enter Key Manually fill in the key as provided in the blue box by cPanel; give it a name you can remember.
To ensure your code is working you must now fill in the code generated by the application and fill it in at Step 2 in the cpanel screen.
If done correctly you will now have configured 2FA for your cPanel access, next time you login you will be requested your UserID, Password and 2FA code.
In the same screen as you did setup the code you can 'Reconfigure' or 'Remove' the Two-Factor Authentication if needed.
