How to Secure Your cPanel Account with 2FA
Adding Two-Factor Authentication (2FA) to your cPanel account provides an extra layer of security beyond your password. Even if someone obtains your password, they won’t be able to access your account without the second factor.
1. What You Will Need
Before starting, download a 2FA app on your smartphone. Popular options include:
- Google Authenticator (Android/iOS)
- Microsoft Authenticator (Android/iOS)
- Authy (Supports multi-device sync)
2. Enabling 2FA in cPanel
- Log in to cPanel: Access your dashboard via the Jiinubi Client Area.
- Locate Security: Scroll down to the Security section and click on Two-Factor Authentication.
- Set Up 2FA: Click the Set Up Two-Factor Authentication button.
3. Linking Your Device
There are two ways to link your app to cPanel:
- QR Code (Recommended): Open your 2FA app on your phone, select "Add Account" or the "+" icon, and scan the QR code displayed on your screen.
- Manual Entry: If your camera isn’t working, manually type the Account name and Key provided in the "Manual Entry" section.
4. Verifying the Connection
- Your app will generate a 6-digit code that changes every 30 seconds.
- Type that code into the Security Code box in cPanel.
- Click Configure Two-Factor Authentication.
5. Important: Save Your Recovery Codes
If you lose your phone or delete the 2FA app, you may be locked out of your account. cPanel will often provide Recovery Codes or an Emergency Access option.
Action: Copy these codes and store them in a secure location, like a password manager or a physical notebook.
6. What to Expect During Login
- Enter your Username and Password as usual.
- A second screen will ask for your 6-digit security code.
- Open your 2FA app, get the code, and enter it to access the dashboard.
Summary of Security Best Practices
| Security Layer | Recommended Action |
|---|---|
| Password | Use a minimum of 16 characters with symbols and numbers. |
| 2FA | Enable it for both cPanel and your Jiinubi Client Area. |
| IP Blocker | If you see failed login attempts in your logs, use the IP Blocker tool to ban those addresses. |
| SSH Access | Keep SSH disabled in cPanel unless you specifically need it for development. |
Pro Tip: Enabling 2FA significantly reduces the risk of unauthorized access, even if your password is compromised. Always keep your recovery codes in a safe place.
