Authenticator app 2FA for hosting and cloud providers
Whoever gets into your hosting account controls your servers, sites and often your billing. These guides show how each web host, VPS and cloud provider sets up an authenticator app, including the separate settings some have for the client area and for panels such as cPanel.
Hosting and cloud · 103
- AcquiaAcquia ID allows one authenticator app and its docs list no backup codes. Set it up for Cloud Platform, add a security key, and know the recovery route.
- Active24Set up Active24 WebAdmin 2FA with an authenticator app: the Standardní TOTP option, backup codes, the passwordless clash, and recovery by signed form.
AivenSet up Aiven two-factor authentication with an authenticator app. It revokes some personal API tokens and turns off when you change your password.
Akamai Cloud (Linode)Akamai Cloud (formerly Linode) wants three security questions set before 2FA. Set up an authenticator app, keep the single scratch code, and get back in.
Alibaba CloudAlibaba Cloud lists its authenticator app as TOTP under Account Protection. Where to turn it on, why to detach it first, and the appeal if locked out.
ALL-INKL.COMALL-INKL.COM has separate 2FA settings for the Members Area, KAS and WebMail. Where each one is, what the help omits, and who to contact if locked out.
AppwriteProtect your Appwrite Console account with an authenticator app: where the MFA switch is, the manual entry code, and why the recovery codes matter most.
AWSAWS requires MFA on every root user. Set up an authenticator app for root and IAM users, add a second device instead of backup codes, and recover access.
Baidu AI CloudBaidu AI Cloud turned on login protection for everyone in 2025, with SMS as a fallback. How to bind an authenticator app as Virtual MFA and unbind it.
BlackbaudBlackbaud requires MFA on most Blackbaud IDs. Set it up with an authenticator app, save the 24-digit recovery code, and add a recovery phone for lockouts.
BlacknightBlacknight runs two control panels, each with its own 2FA. Set up an authenticator app in yours, keep the single backup code, and know who to call.
BubbleBubble 2FA covers every app on your account. Set up an authenticator app, make backup codes separately, and see what Support asks if you're locked out.
bunny.netbunny.net asks for an authenticator code at every dashboard login. Where to switch it on, what the restore codes are for, and what to do without them.
CarrdCarrd treats its 2FA backup codes as an optional extra, and documents no recovery without them. Where the setting is and how to keep from being locked out.
CDN77Set up CDN77 two-factor authentication in the Client Panel with an authenticator app, why to plan for recovery without backup codes, and team-wide rules.
CDNsunCDNsun's 2FA uses your phone number on file as the backup, not recovery codes. Add the number first, then link an authenticator app from Billing/Settings.
Cloud 66Set up an authenticator app for Cloud 66 from your default organization, choose how often it asks for codes, and add a security key as a backup.
CloudFlow (Section.io)Section.io's console is now documented as CloudFlow. Where its 2FA switch is, how to pick the authenticator app, and why a reset can take a week.
cloudHQcloudHQ has no backup codes, so the authentication key beside its QR code matters. Set up an authenticator app, sign in with it, and get back in.
CloudwaysSet up Cloudways two-factor authentication with an authenticator app: the Activate TFA button, 12 backup codes, SMS for owners only, and lockout help.
ContaboContabo finishes authenticator setup at your next login, not in settings. Where to switch it on, the 12 recovery codes, panel migration, and lockouts.- cyonmy.cyon sends no 2FA codes by SMS or email and lists no backup codes. Where to turn on an authenticator app, trusted browsers, and what to do if it's lost.
DigitalOceanDigitalOcean 2FA is only for email-and-password sign-in. Set up an authenticator app, save backup codes, and see what support needs if you are locked out.- dinahostingdinahosting gives you one recovery code, and using it turns 2FA off. How to add an authenticator app to the Control Panel and what to do if you lose it.
DirectAdminDirectAdmin's Two-Step Authentication is run by your host. Where the setting is now, recovery codes, trusted devices, and what to do if you're locked out.
Elastic CloudElastic Cloud makes MFA mandatory for password sign-ins and gives no backup codes. Set up an authenticator app, add a second method, and get back in.
Engine YardEngine Yard 2FA lives on its own page at login.engineyard.com, with no documented backup codes. Turn it on, add a second phone, and get reset by Support.- eukhostProtect your eukhost Client Portal with an authenticator app: where 2FA/Security Settings is, saving the backup codes, and why cPanel needs its own setup.
FastCometProtect your FastComet Client Area with an authenticator app: where the setting is, the one permanent backup code, sub-account access, and turning it off.
FastlyFastly shows only a QR code at setup, and its recovery codes must be used in order. How to turn on 2FA, keep your codes, and get back in if you lose it.
Flexera Software Vulnerability ResearchFlexera Software Vulnerability Research makes 2FA mandatory at first sign-in. How to pick Token, scan the code, and who resets it if you lose your phone.
Fly.ioFly.io 2FA is under Account > 2FA, but only for email and password sign-ins. How to set it up, get backup codes, and what recovery asks for.
fortrabbitfortrabbit's 2FA is app-only, with no SMS, and is documented for the old Dashboard. Where to turn it on, the recovery codes, and what support asks for.
GreenGeeksSet up GreenGeeks two-factor security with an authenticator app, save the recovery codes, and add the security questions that help if your phone is lost.
HashiCorp Cloud PlatformHCP offers authenticator app MFA only if you sign in with email and password. Where to turn it on, the single recovery code, and how to get back in.
HerokuHeroku requires MFA at every Dashboard login. Add an authenticator app, add recovery codes as a separate step, and know what to do if you get locked out.
HetznerSet up Hetzner 2FA in Hetzner Accounts with an authenticator app. Keep the recovery key safe: if you lose it, Hetzner sends a new one only by post.- Hewlett Packard EnterpriseHPE lists its authenticator option as Google Authenticator and gives no backup codes. Set it up on your HPE account and add a second method as backup.
HostekHostek now requires an authenticator app for its billing control panel, and 2FA can't be turned off. Set it up, save your backup codes, and recover access.
HostensHostens makes 2FA mandatory and asks you to pick a method at sign-in. How to choose the authenticator app, add it, and what to do if you get stuck.- Hosting UkraineHosting Ukraine calls its authenticator option GAuth. How to turn it on, why the phone fallback turns 2FA off, and what account recovery asks for.
hosting.comhosting.com 2FA works only with an authenticator app, with no SMS and no documented backup codes. Turn it on in the Hosting Panel and know the ID check.
HostingerSet up Hostinger 2FA with an authenticator app, save the backup codes it shows only once, and learn why a recovery email won't get you past a lost app.
HostpointHostpoint gives no backup codes: lose your authenticator and it's an SMS code or a deactivation code by post. How to set up 2FA for your Hostpoint ID.
HostUSHostUS keeps its 2FA switch under the Hello, (name)! menu in the client area. How to turn it on with an authenticator app, and what its help leaves out.
Huawei CloudHuawei Cloud asks for two codes in a row to link an authenticator app and lists no backup codes. Where to bind it, turn on login protection, and recover.
IBM CloudOn IBM Cloud, MFA is an account rule plus a factor you add yourself. How to require TOTP, add an authenticator app, and reset it with no backup codes.
ICDSoftICDSoft has separate 2FA for the hosting Control Panel and each Webmail mailbox. Set both up with an authenticator app, keep the secret key, and recover.
InfomaniakInfomaniak lists third-party authenticator apps as OTP Application, behind See more methods. Setup, backup codes, app prompts and ID-based recovery.- InMotion HostingInMotion Hosting has two separate 2FA switches, one in AMP and one in cPanel. Set up both with an authenticator app and learn what to do if you lose it.
InterServerInterServer documents authenticator-app 2FA for cPanel and WHM, not its customer portal. How to set it up, why to plan without backup codes, who resets it.- IO ZoomIO Zoom's only 2FA guide is a 2016 announcement. Where Security Settings is in the client portal, what it asks for, and how to get help if locked out.
KeyCDNSet up an authenticator app for your KeyCDN dashboard login: where the setting is, what the login form asks for, and how to plan for no backup codes.
KinstaMyKinsta always asks for a code, by email unless you add an app. How to switch to an authenticator app, why there are no backup codes, and how to recover.
KnownHostKnownHost 2FA sits on the Authentication tab of its client portal and needs only your current password. Setup steps, sign-in, and lockout help.
KrystalKrystal's 2FA lives in Krystal Identity, not the client area itself. Add an authenticator app, save recovery codes shown for one minute, and get back in.
LCN.comLCN.com shows your 2FA secret key only once and documents no backup codes. Set up an authenticator app, save the key, and know what to do if you lose it.- LeasewebLeaseweb keeps 2FA in its Profile Dashboard, not the Customer Portal. Set up an authenticator app, add recovery codes, and see when admins can require it.
- Liquid WebLiquid Web gives no backup codes for 2FA: it tells you to save the setup key. Turn on an authenticator app in the portal and get back in if you lose it.
MacStadiumTurn on 2FA for the MacStadium Portal with an authenticator app: where the setting hides under Users, mandatory 2FA for admins, and how support resets it.
Microsoft work or school accountMicrosoft's setup screens start with Microsoft Authenticator. How to pick another app in Security info, what your IT admin controls, and how to recover.
NameHeroNameHero's client portal gives you a single backup code, not a list. Where to turn on 2FA, how to add an authenticator app, and what to do if locked out.- NeoloNeolo has two 2FA settings: one in cPanel, where it asks for an authenticator app, and one in the client area. Steps, gaps, and what to do if locked out.
netcupnetcup already emails you a code at every sign-in. Swap it for an authenticator app in Master Data, plus what netcup says about devices and recovery.
NetlifyNetlify's own 2FA uses only an authenticator app, and its recovery codes appear once. Where to turn it on, team enforcement, and what to do if locked out.- NexcessSet up 2FA on the Nexcess Client Portal with an authenticator app: where 2-Factor Auth is, saving backup codes, the SMS option, and getting back in.
NitradoNitrado's 2FA lives under My Account on the website, not in the Nitrado app. Where to add an authenticator app, what its docs leave out, and who to ask.- NutstoreNutstore's 手机身份验证 adds an authenticator code at sign-in, but a password reset can switch it off. Where to turn it on, team rules, and recovery.
o2switcho2switch has separate 2FA for its client area and for cPanel. How to add an authenticator app to each, and why support is the only way back in.- OMGSERVOMGSERV gives no backup codes, only a text key it suggests you keep safe. Where to turn on an authenticator app, signing in after, and turning it off.
one.comone.com lists no backup codes for Control Panel 2FA, so a lost phone means a signed form and ID. Set up an authenticator app and avoid the email catch.
Oracle Cloud InfrastructureOracle Cloud requires 2-step verification at Console sign-in. Tick the box for other authenticator apps, save a bypass code, and know who can reset it.
OVHcloudOVHcloud shows your 10 backup codes only once, and getting back in without them takes ID documents. How to add an authenticator app the safe way.- Panorama9Turn on Panorama9 (P9) two-factor authentication from My profile, add backup codes or an SMS recovery number, and know what to do if you lose your phone.
- PlanetHosterPlanetHoster has no backup codes, so you save the QR code or secret key yourself. Where the 2FA setting is, how sign-in changes, and what a lockout costs.
PlanetScalePlanetScale MFA uses an authenticator app, and its recovery codes are the only way back in if you lose it. Setup steps, sign-in, and turning it off.
Plesk 360Plesk 360 sign-in is now a WebPros Account, and MFA was switched off for everyone in February 2026. How to turn it back on with an authenticator app.
Poli SystemsProtect your Poli Systems Manager with an authenticator app: where Time Based Tokens is, the single backup code, and what to do if you lose your phone.
Rackspace TechnologyRackspace has required MFA on every account since March 2024. Add an authenticator app in the Cloud Control Panel or MyRackspace, and save recovery codes.
RailwayTurn on two-factor authentication for your Railway account with an authenticator app: where it is, recovery codes, passkeys, and how Railway resets 2FA.
RamNodeRamNode documents 2FA for the cPanel account on its shared hosting, not the Client Area. Set it up with an authenticator app, save codes, and recover.
Redis CloudRedis Cloud adds an authenticator app only after text-message MFA is on. Where both settings are, how sign-in works, owner enforcement, and lockouts.
RunCloudRunCloud requires 2FA or IP whitelisting on every account. Set up an authenticator app, save your recovery code, add an SMS fallback, and recover access.
ScaleGridScaleGrid's 2FA is a checkbox under Settings > Users and only covers password sign-in. Set it up with an authenticator app and see what isn't documented.
ScalewaySet up a TOTP authenticator for the Scaleway console: where Owners and IAM Members find it, backup codes, enforced MFA deadlines, and ID-based recovery.
ServerPilotServerPilot's docs give one paragraph on 2FA: where the setting lives and which apps work. What that means for setup, lost phones and getting back in.
ServerspaceProtect your Serverspace control panel with an authenticator app: where the setting is, the missing backup codes, and what to do before you lose a phone.- Shy.ggShy.gg won't turn on 2FA until your email address is verified. Where the setting is, how to add it to an authenticator app, and what its docs leave out.
SiteGroundSiteGround 2FA pairs an authenticator app with a backup phone for SMS. Where to turn it on, how to add a second device, and what to do if locked out.
SquareTurn on Square two-step verification with an authenticator app. Square lists no backup codes, so add a backup phone number and learn its recovery routes.
SquarespaceSquarespace Balance won't move money until 2FA is on. Set it up with an authenticator app, keep the eight backup codes, and know what support asks for.- TilaaSet up an authenticator app on your Tilaa cloud account. Tilaa documents no backup codes, and only its verification team can switch 2FA off again.
- Time4VPSTime4VPS makes every client pick a 2FA method at login. How to choose the authenticator app, scan the QR code, and what support does if you lose it.
TransIPTransIP gives no backup codes. Set up an authenticator app on the Security tab, know the text-message fallback, and see the proof support asks for.
UpCloudUpCloud has no backup codes: its fallback is a code by text or phone call. Check your phone number, then link an authenticator app to the control panel.
VEDOS (WEDOS)Set up OTP for your VEDOS (WEDOS) customer account with an authenticator app. Its help lists no backup codes, so check your phone and email first.
VerpexVerpex lists no backup codes for its client area 2FA. Where the switch is, how to scan the QR code into an authenticator app, and what to do if locked out.
VersioTurn on 2FA for Mijn Versio with an authenticator app. Versio's help mentions no backup codes, so a lost phone means an ID check by its helpdesk.- Web Hosting CanadaWHC's Client Area, cPanel and WHM each have their own 2FA switch. Set up an authenticator app, save the single backup code, and know who can reset it.
WebflowWebflow shows its 8 backup codes once, in the middle of setup. Where to turn on authenticator app 2FA, when Webflow asks for codes, and how to get back in.
WixWix asks for an authenticator code only when you log in with email and password. Turn it on in Account Settings, reset it for a new phone, and get back in.
World4YouWorld4You's 2FA steps are written for its own app, but other authenticator apps work too. Where the setting is, and how the SMS reset works.
WP EngineWP Engine's User Portal already emails you codes. Add an authenticator app, scan its QR code on a spare device, and see why a lockout takes a long time.
Before you start
Other types of service
- Banks and credit unions14
- Investing and brokerage25
- Crypto exchanges and wallets78
- Payments, accounting and insurance76
- Developer tools107
- Domain registrars53
- Email30
- Messaging and social39
- Security, identity and VPN57
- Cloud storage and backup26
- Gaming and betting51
- Entertainment and creative tools26
- Marketing and sales74
- Productivity and remote work61
- Business tools and other services74
- Shopping and tickets23
- Phone, internet and utilities10
- Travel and transport13
- Universities and education32
- Government17
- Health15
- Smart home and devices19