Shahid Malla

Tutorial: How to Enable Two-Factor Authentication (2FA)

Shahid Malla Shahid Malla February 4, 2026 6 min read
Tutorial: How to Enable Two-Factor Authentication (2FA)

Two-factor authentication adds an extra layer of security to your account. Even if someone gets your password, they can't log in without your phone. Here's how to set it up.

What You'll Need

  • Your smartphone (iPhone or Android)
  • An authenticator app installed
  • Access to your client area account
  • 5 minutes of your time

What is Two-Factor Authentication?

Two-factor authentication (2FA) requires two things to log in:

Factor What It Is Example
1. Something you know Your password MySecretPass123
2. Something you have Your phone 6-digit code from app

Why Enable 2FA?

  • Protects against password theft
  • Blocks unauthorized access
  • Secures your services and data
  • Industry best practice for security

Step 1: Install an Authenticator App

First, install an authenticator app on your smartphone:

App Name Platform Notes
Google Authenticator iOS, Android Free, simple to use
Microsoft Authenticator iOS, Android Free, cloud backup
Authy iOS, Android, Desktop Free, multi-device sync
1Password iOS, Android Paid, password manager

Download Steps

  1. iPhone: Open App Store → Search "Google Authenticator" → Install
  2. Android: Open Play Store → Search "Google Authenticator" → Install

Step 2: Log Into Your Client Area

Login Steps

  1. 1. Go to your hosting provider's client area
  2. 2. Enter your email and password
  3. 3. Click "Login"
  4. 4. You're now in your dashboard

Step 3: Navigate to Security Settings

Find Security Settings

  1. 1. Click on your name or profile icon
  2. 2. Select "Security Settings" or "Account Security"
  3. 3. Or navigate to: Account → Security
  4. 4. Find the "Two-Factor Authentication" section

Step 4: Enable Two-Factor Authentication

Start Setup

  1. 1. Click "Enable Two-Factor Authentication"
  2. 2. Or click "Set Up" next to 2FA option
  3. 3. Choose "Time Based Tokens" (TOTP)
  4. 4. You'll see a QR code on screen

Step 5: Scan the QR Code

Scan With Your App

  1. 1. Open your authenticator app on your phone
  2. 2. Tap the "+" button to add account
  3. 3. Select "Scan QR Code" (or "Scan Barcode")
  4. 4. Point your camera at the QR code on screen
  5. 5. The app will automatically add the account

Can't Scan?

If you can't scan the QR code, look for "Enter code manually" or "Manual entry" option. You'll get a text code to type into your app instead.

Step 6: Verify the Code

Confirm Setup

  1. 1. After scanning, your app shows a 6-digit code
  2. 2. The code changes every 30 seconds
  3. 3. Enter this code in the verification field
  4. 4. Click "Verify" or "Confirm"
  5. 5. 2FA is now enabled!

Step 7: Save Your Backup Code

CRITICAL STEP!

After enabling 2FA, you'll receive backup codes. Save these in a safe place! If you lose your phone, these codes are the only way to access your account.

How to Save Backup Codes

  • Write them down on paper (keep in safe place)
  • Save in password manager
  • Store in encrypted note
  • Print and keep in secure location
  • Don't save on your phone (defeats purpose)
  • Don't email to yourself

How Login Works With 2FA

After enabling 2FA, here's how you'll log in:

New Login Process

  1. 1. Enter your email and password (same as before)
  2. 2. Click "Login"
  3. 3. You'll see a screen asking for 2FA code
  4. 4. Open your authenticator app
  5. 5. Find your hosting account entry
  6. 6. Enter the current 6-digit code
  7. 7. Click "Verify" - you're logged in!

Code Timing

Codes change every 30 seconds. If the code is about to expire (timer almost empty), wait for the next code to avoid timing issues.

Troubleshooting

Problem: Code Not Working

Solutions:

  • • Make sure you're entering the code quickly
  • • Check your phone's time is correct (automatic time zone)
  • • Ensure you're looking at the right account in the app
  • • Try the next code if current one expires

Problem: Lost Phone

Recovery Options:

  1. 1. Use your backup code to log in
  2. 2. Once logged in, disable 2FA temporarily
  3. 3. Set up 2FA again on your new phone
  4. 4. Save new backup codes

Problem: No Backup Codes and Lost Phone

Contact Support

You'll need to contact support and verify your identity through alternative means (payment details, ID verification, security questions). This process takes longer for security reasons.

Disabling 2FA (If Needed)

Disable Steps

  1. 1. Log into your client area
  2. 2. Go to Security Settings
  3. 3. Find Two-Factor Authentication
  4. 4. Click "Disable" or "Remove"
  5. 5. Enter your current 2FA code to confirm
  6. 6. 2FA is now disabled

Quick Reference

2FA Setup Checklist

  • Install authenticator app on phone
  • Log into client area
  • Go to Security Settings
  • Click Enable 2FA
  • Scan QR code with app
  • Enter verification code
  • SAVE backup codes safely
  • Test login with 2FA

Need Help With Security?

Having trouble setting up two-factor authentication? I'm here to help you secure your account properly.

Get Help
Share this article:
Shahid Malla

About Shahid Malla

Expert

Full Stack Developer with 10+ years of experience in WHMCS development, WordPress, and server management. Trusted by 600+ clients worldwide for hosting automation and custom solutions.