Skip to main content
Two-factor authentication (2FA) asks for a 6-digit code from an authenticator app on your phone after your password, such as Google Authenticator, Microsoft Authenticator, 1Password or Bitwarden. A passkey also counts as a second factor.
Console 2FA is separate from 2FA in cPanel and the Grid Hosting panel. Turn it on in each one you use.

​
Turn on 2FA

1

Open Password and 2FA

In the sidebar, open Security > Password and 2FA and confirm your password.
2

Click Enable 2FA

Under Two-factor authentication, click Enable 2FA.
3

Scan the QR code

Scan the QR code with your authenticator app, or type the key under it into the app. Click Continue.
Enable two-factor authentication dialog with a QR code and the setup key
4

Enter the code

Enter the 6-digit code your app shows and click Confirm.
5

Save your recovery codes

Click View recovery codes and store the codes in a password manager or another safe place.
Two-factor authentication section with Disable 2FA and the 2FA recovery codes box
From then on, the console asks for a code every time you log in with your password.

​
Recovery codes

A recovery code lets you log in without your phone: on the code page, click Log in with a recovery code. You get 8 codes and each works once; the console replaces a used code with a new one, so view and save your codes again afterwards. Regenerate codes gives you a new set and the old codes stop working.

​
If you lose your phone

  • You have a recovery code: log in with it, click Disable 2FA, then Enable 2FA to set up your new phone.
  • You have a passkey: click Log in with a passkey, then set up 2FA again.
  • You have neither: contact us through the contact form. You don’t need to log in to use it.
Getting a new phone? Move 2FA before you reset the old one: click Disable 2FA, then Enable 2FA and scan the new QR code.

​
Turn off 2FA

On Password and 2FA, click Disable 2FA and confirm. It is off straight away. Without a passkey, your API tokens stop working until you turn 2FA on again.
If a billing account you use requires 2FA, the console shows Two-factor authentication required when you open it without a second factor. Confirm with a passkey, log in again with your code, or click Set up two-factor authentication.
Last modified on October 31, 2026