Plesk 360 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Plesk 360, at platform360.io, is where Plesk customers see their servers, licenses and 360 Monitoring in one place. The account you sign in with is a WebPros Account: the same login also covers the WebPros Dashboard and the Plesk and cPanel support portals (Plesk, Plesk 360).
Multifactor authentication (MFA) is optional, but Plesk recommends it. The second factor is a code from an authenticator app on your phone (Plesk 360). This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.
How we checked this guide: the Plesk 360 steps come from the Plesk 360 documentation and the Plesk, cPanel and WebPros support centers, linked below, which we read on October 21, 2026. We read the support articles through each help center's public article feed. We haven't tested them on a Plesk 360 account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Had MFA before February 2026? Set it up again
On February 17, 2026, WebPros moved every WebPros Account to a new sign-on provider. The secret keys behind authenticator codes couldn't be carried over, so MFA was turned off on every account that had it (Plesk).
If you had MFA on, your next sign-in asks for a one-time password sent by email instead. After that, WebPros says to turn MFA back on by following the instructions in the notification it sends you. Until you do, your account is protected by a password alone. The old Plesk 360 entry in your authenticator app no longer works, so remove it once the new one is in place: in Novaz, open the account and tap Remove account.
Turn on MFA with an authenticator app
The Plesk 360 documentation lists FreeOTP, Google Authenticator, Microsoft Authenticator, 2FAS and 1Password as examples. Any app that makes 6-digit time-based codes, including Novaz, fits that description. It describes these steps (Plesk 360):
- Sign in at platform360.io. Click your email address in the header and open Personal profile.
- Under Multifactor authentication, click Send enrollment e-mail.
- Open the email from Plesk 360 and click Enable multi-factor authentication. A setup page opens in your browser.
- In Novaz, tap +, then Scan QR code, and point the camera at the QR code. If you opened the email on your iPhone, take a screenshot of the code, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
- Plesk 360 shows a recovery code. Save it somewhere safe, away from your phone, then click Continue.
The documentation doesn't mention a text key you can type instead of scanning. If the setup page offers one, in Novaz tap +, then Enter key manually, and paste it as the Setup key (What is a 2FA setup key?).
These documentation steps date from before the February 2026 change, and the page doesn't show a date. Your account settings now open as a WebPros Account page with a Security tab: in Plesk 360, click your name or email at the top right and choose Manage WebPros account (Plesk). If you don't see the enrollment email button, look there. We couldn't find an official page with the current labels.
Signing in afterwards
Plesk 360 then asks for a 6-digit code from your app every time you sign in. The documentation calls the screen Verify Your Identity (Plesk 360), and the field Enter your one-time code (Plesk 360). The pages don't say whether you can mark a device as trusted.
Keep the recovery code
The documentation mentions one recovery code, not a list. Keep it even if you back up Novaz: without a Novaz backup the keys exist only on your iPhone, and this code is your way in if the phone is gone. Store it in a password manager or on paper. The documentation doesn't say whether you can make a new one. More in 2FA backup codes.
If Plesk 360 rejects your code
The Plesk 360 documentation has no advice on rejected codes. The usual cause is the iPhone's clock: open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Also make sure you're using the entry you added after February 17, 2026, not an older one. See Authenticator code not working?
If you lose your authenticator
Use your recovery code. Without it, contact WebPros Account Support through its ticket form, or email account@webpros.com if you can't sign in (WebPros). The support pages don't say what proof of ownership WebPros asks for or how long a reset takes. Have the email address on the account ready, and access to that mailbox. See Lost the phone with your authenticator app?
Changing phones and turning MFA off
The official pages don't describe moving MFA to a new phone or switching it off. With a Novaz iCloud backup or backup file, you restore your accounts on the new iPhone. Without one, keep the old phone until Plesk 360 is set up on the new one, and look in the WebPros Account Security tab for the option. See How to transfer your authenticator app to a new iPhone.
