InMotion Hosting 2FA: how to set up an authenticator app for AMP and cPanel
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
An InMotion Hosting customer has two logins, and each has its own two-factor authentication (2FA). The Account Management Panel (AMP) is your customer account, where you manage billing and domains and open cPanel (InMotion Hosting). cPanel runs the hosting. Each 2FA is optional and separate. AMP offers Google Authenticator or text messages; cPanel uses an authenticator app. This guide sets up both with Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the InMotion Hosting steps come from InMotion Hosting's own support center and AMP sign-in page, linked below. On October 20, 2026 we read the cPanel article and the sign-in page directly. The support center then blocked our automated requests, so we read the other articles in archived copies on web.archive.org, saved between May and September 2026. Some articles date from 2021 to 2023, and we haven't tested them on an InMotion Hosting account, so a label may differ. The Novaz steps are checked against the app, version 1.0.5.
Start with AMP
AMP opens cPanel without cPanel's code; that's InMotion's fix for a lost cPanel authenticator (InMotion Hosting). So whoever gets into AMP gets cPanel too. Protect AMP first.
Turn on 2FA for AMP
InMotion's AMP article gives these steps (InMotion Hosting):
- Log in to AMP at secure1.inmotionhosting.com.
- Hover over My Account and select Login & Security.
- Click Two Factor Authentication.
- Select Google Authenticator. InMotion names only that app, but its codes are standard time-based ones, the kind Novaz makes.
- Follow the verification steps on screen, which the article doesn't show. For a QR code, tap + in Novaz, then Scan QR code; if it's on the same iPhone, use a screenshot and Choose a photo (how). For a text key, tap +, then Enter key manually, and type it as the Setup key.
- Enter the code from Novaz when AMP asks.
The other choice, Text Message (SMS), asks for your carrier and number, then Enable Two Factor Authentication. InMotion warns it doesn't work with Sprint or T-Mobile. See authenticator app vs SMS.
Turn on 2FA for cPanel
On Business Class and Reseller plans the feature is already enabled, so you can go straight to setup. On VPS and dedicated servers it has to be enabled in WHM first (InMotion Hosting).
- Log in to cPanel as the user you want to protect.
- Type "two" in the search bar and click the Two-Factor Authentication icon.
- Click Set Up Two-Factor Authentication.
- Under Step 1, scan the QR code with Novaz (+, then Scan QR code). Or use the Manual Entry section, which shows an Account and a Key: in Novaz, tap +, then Enter key manually, and type the Key as the Setup key (what's a setup key?).
- Under Step 2, type the Novaz code in Security Code and click Configure Two-Factor Authentication.
Signing in afterwards
At AMP sign-in, after your email and password, a step titled Enter Authentication Code asks for the code from your app (InMotion Hosting). The page may also email you a one-time code to confirm it's you, a check it says isn't 2FA. cPanel asks for your security code on a second page; type it and click Continue. Neither mentions remembering a device.
No backup codes
InMotion's pages don't mention backup or recovery codes for AMP or cPanel. Unless you back up Novaz with iCloud backup or a backup file, its keys exist only on your iPhone, so know your way back in: AMP is the backup for cPanel, and InMotion's support team is the backup for AMP.
If a code is rejected
cPanel says each code lasts about 30 seconds, so enter it before Novaz shows a new one. Otherwise, check the iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz warns when the clock is 15 seconds or more off. More in Authenticator code not working?
If you lose your authenticator
cPanel: sign in to AMP and open cPanel from there. Search for "two", click Two-Factor Authentication, then Remove Two-Factor Authentication and Remove (InMotion Hosting). On Reseller plans, AMP opens the main reseller's cPanel. For a child account, open WHM through AMP, click Two-Factor Authentication, the Manage Users tab, Disable next to the user, then Continue (InMotion Hosting).
AMP: there's no documented self-service reset. The AMP article only says to contact InMotion with questions about Two Factor Authentication; its help box lists 757-416-6575, extension 2, and support tickets. Support may verify you with the last 4 digits of a card on file or, if you've set one, your passphrase, which then becomes the only accepted proof (InMotion Hosting). You can set a passphrase now under Login & Security > Verification (InMotion Hosting). InMotion doesn't say how long a reset takes. See also Lost the phone with your authenticator app?
New phone or turning it off
For cPanel, remove 2FA as above, then set it up again on the new phone. The AMP article doesn't explain turning 2FA off or moving it, so check Login & Security > Two Factor Authentication while you still have the old phone. With a Novaz iCloud backup or backup file, you can restore your accounts on the new iPhone instead: see How to transfer your authenticator app to a new iPhone.
