Two-factor authentication means that knowing your password is not enough to get in. It is the single most effective thing you can do to protect your account, and it takes about two minutes to set up.
On your client area account
Log in, open your account security settings, and choose to enable two-factor authentication. You will be shown a QR code to scan with an authenticator app on your phone. From then on you will be asked for a six-digit code as well as your password.
On cPanel
cPanel has its own two-factor setting, separate from the client area. Look for Two-Factor Authentication in the Security section and follow the same process.
Which app
Any standard authenticator app works – there is no need for a specific one. Some password managers can also store the codes, which is convenient and keeps everything together.
Keep your recovery codes
You will be given backup or recovery codes when you set this up. Save them somewhere that is not your phone. If you lose the phone and have no codes, recovering access means proving who you are to us, which is deliberately slow.
Also protect the website itself
Two-factor on your hosting account does not protect the login page of your website. If your site has an administrator login – and most do – secure that separately, with a strong unique password and, where available, its own two-factor.
