Two-Factor Authentication (2FA) provides an additional layer of security to your cPanel webmail account by requiring users to provide two forms of authentication before granting access. This extra layer of protection helps safeguard your emails and sensitive information from the unauthorized access.
This Two-Factor Authentication (2FA) feature is only supported to V13 where OS need to be CloudLinux 8 and above.
To enable 2FA for your cPanel webmail account, follow these steps:
Step 1
Log in to your webmail account using your username and password. You can typically access webmail by navigating to https://yourdomain.com/webmail, where “yourdomain.com” is your website’s domain
Step 2
From the Webmail management screen, access Two Factor Authentication (Bottom right corner at the image below)
Step 3
Follow the provided instructions to set up Two Factor Authentication, where you will be required to scan the QR code provided with the authenticator app.
For the choices of the authenticator app, you may consider to use either Google Authenticator app or Duo Mobile.
Step 4
Once you’ve scanned the QR code on screen with the authenticator app, you will be seeing a 6 digit code on to your authenticator app.
Step 5
Enter the six-digit security code in the Security Code text box and followed by tapping “Configure Two Factor Authentication”
Step 6
You will be greeted with the below message upon successful setup of the 2FA
Step 7
Access to the webmail to verify and enter your 6 digit code where the code refreshes every 30 seconds.
FAQ:
- What happen if I’ve lost my terminal for the authenticator app?
Answer: You can liaise with your domain’s cPanel access owner and remove the 2FA of your email account.
- Does cPanel access support 2FA as well?
Answer: Yes, as you can refer to (See your hosting provider’s help centre for the matching procedure.)
- Is the 6 digit code required upon setting up the email account onto email client [Outlook, Thunderbird etc]
Answer: It’s not required at the moment for email setup on the email client.
Should you have any issues, please reach out @ support@your provider.my
Linked procedure
Introduction
Two-Factor Authentication (2FA) is a security mechanism that denies access to your cPanel account unless you enter a unique code available on your smartphone.
Since cPanel provides access to all your files, emails, and other information, implementing 2FA is an excellent method to enhance the security of your account.
What you’ll need
Before you start this guide, you will require the following:
- Access to cPanel
- A Time-based One-Time Password (TOTP) application on your phone, such as Duo Mobile
Step 1 — Downloading a TOTP app
We will be using the Duo Mobile app.
Step 2 — Enabling Two-Factor Authentication
Go to cPanel and select the Two-Factor Authentication section.
Then, click on Set Up Two-Factor Authentication
At this point, you will see 2 options that will be briefly outlined below. To complete them, you will need to use the TOTP app.
Option 1 involves scanning a QR code. If you don’t have a QR code reader, you can select option 2 and manually enter the generated code located below the QR code.
Once you have entered all the required information, the application will generate a 6-digit code which you must input into cPanel to finalize the process.
Congratulations! Two-Step Authentication has been successfully activated on your cPanel account.
Step 3 — Logging Into cPanel
Moving forward, after entering your cPanel credentials, you will need to provide a special 6-digit code generated by the TOTP app. If you fail to enter the code, access to cPanel will be refused, ensuring that your control panel remains secure even if someone knows your cPanel password.