Difference between revisions of "CPanel Two Factor Authentication"

From Acenet Knowledgebase
Jump to: navigation, search
(Created page with "Starting with cPanel 54, Acenet has enabled Two Factor Authentication (2FA) on all of our Shared Servers. This allows you to use a time-based, one time password app such as Go...")
 
Line 1: Line 1:
Starting with cPanel 54, Acenet has enabled Two Factor Authentication (2FA) on all of our Shared Servers. This allows you to use a time-based, one time password app such as Google Authenticator to help secure your cPanel and WHM logins. 2FA login can be enabled on both cPanel and Root users on a server.
+
Starting with cPanel 54, Acenet has enabled Two Factor Authentication (2FA) on all of our Shared Servers. This allows you to use a time-based, one time password (TOTP) app such as Google Authenticator to help secure your cPanel and WHM logins. 2FA login can be enabled on both cPanel and Root users on a server.
  
{{warning|'''WARNING:'''  When you enable 2FA. an application on your smartphone supplies a code that you '''''MUST''''' enter with your password. Without your password, you will not be able to log in.}}
+
{{warning|'''WARNING:'''   
 +
With 2FA enabled, an app on your smartphone supplies a one-time code that '''''MUST''''' be entered with your password. Without your smartphone on hand to get this code, you will not be able to log in.}}
  
 
To enable 2FA authentication, log into your cPanel account, and go to Security -> Two Factor Authentication.
 
To enable 2FA authentication, log into your cPanel account, and go to Security -> Two Factor Authentication.
Line 19: Line 20:
  
  
On the configuration page, you will be prompted to scan a QR code to  
+
On the configuration page, you will be prompted to scan a QR code, which will automatically set up the necessary config within your TOTP application.  You may need to download a QR scanning app if you do not already have one.  You can configure the TOTP app manually, but it is much easier with the QR code.
  
  
 
[[File:2fa-step1.png]]
 
[[File:2fa-step1.png]]
 +
 +
 +
Scroll down to Step 2, and enter the code your TOTP application gives you.
 +
 +
 +
[[File:2fa-step2.png]]
 +
 +
 +
Click "Configure Two-Factor Authentication", and you should be all set.  Next time you log in, you will be prompted for this code.
 +
 +
{{tip|  If for some reason you are unable to login with the code (lost or stolen smartphone, etc.), you can open a ticket at your [[Client Area]], and our technical staff will be able to disable 2FA on your account so that you can log in.

Revision as of 16:27, 26 January 2016

Starting with cPanel 54, Acenet has enabled Two Factor Authentication (2FA) on all of our Shared Servers. This allows you to use a time-based, one time password (TOTP) app such as Google Authenticator to help secure your cPanel and WHM logins. 2FA login can be enabled on both cPanel and Root users on a server.

WARNING: With 2FA enabled, an app on your smartphone supplies a one-time code that MUST be entered with your password. Without your smartphone on hand to get this code, you will not be able to log in.

To enable 2FA authentication, log into your cPanel account, and go to Security -> Two Factor Authentication.


2fa.png


Click on the icon to go to the next page.

If 2FA is not enabled, you will see this page. Click on "Set Up Two-Factor Authentication to enable 2FA.


2fa-1.png


On the configuration page, you will be prompted to scan a QR code, which will automatically set up the necessary config within your TOTP application. You may need to download a QR scanning app if you do not already have one. You can configure the TOTP app manually, but it is much easier with the QR code.


2fa-step1.png


Scroll down to Step 2, and enter the code your TOTP application gives you.


2fa-step2.png


Click "Configure Two-Factor Authentication", and you should be all set. Next time you log in, you will be prompted for this code.

{{tip| If for some reason you are unable to login with the code (lost or stolen smartphone, etc.), you can open a ticket at your Client Area, and our technical staff will be able to disable 2FA on your account so that you can log in.