Short answer: In cPanel open Security, then Two-Factor Authentication, scan the QR code with an authenticator app and type the 6 digit code.
Two-factor authentication (2FA) asks for a password and a short code from your phone. A stolen password alone is then not enough.
Steps
- Log in to cPanel. See Log in to your client area and cPanel.
- In the Security section, click Two-Factor Authentication.
- Click Set Up Two-Factor Authentication.
- Open your authenticator app and scan the QR code. If you cannot scan, type the account and key shown on screen into the app.
- Type the 6 digit code from the app into the Security Code box.
- Click Configure Two-Factor Authentication.
From now on cPanel asks for the code after your password.
To turn it off
Open the same page and click Remove Two-Factor Authentication.
Tips
- Save the setup key in your password manager in case you change phones.
- Do the same for the email address you use for your akthost client area.
Questions people ask
Which app do I use?
Any authenticator app that makes time-based one-time codes works, for example Google Authenticator, Microsoft Authenticator or Duo Mobile.
I lost my phone. How do I get in?
Open a support ticket from your client area. We will check who you are and help you reset it.
Does this protect my WordPress login too?
No. This only protects cPanel. For WordPress admins use a two-factor plugin.
Still stuck? Open a support ticket with your domain name and what you see. Please do not put passwords in the ticket.
