Webcentral 2FA: how to set up an authenticator app for the Hosting Panel
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Webcentral is an Australian domain registrar and web host. Your Webcentral account signs you in to the Hosting Panel at theconsole.webcentral.au, where you manage domains, DNS, hosting, email services and billing. Webcentral now runs on the webcentral.au domain, and its old help articles on support.webcentral.com.au no longer load, so older links you may have saved point nowhere.
Two-factor authentication (2FA) on the Hosting Panel is optional, and the setting describes it as highly recommended. The only method Webcentral documents is an authenticator app that makes six-digit codes (Webcentral). This guide uses Authenticator App - Novaz on iPhone. Novaz is just one choice: any authenticator app works the same way.
How we checked this guide: the Webcentral steps come from Webcentral's own help center, linked below, including the screenshots in its articles, which we read on October 21, 2026. We haven't tested them on a Webcentral account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Before you start: there are no backup codes in the help
Webcentral's article on the setting doesn't mention backup or recovery codes, and its screenshots don't show any after setup (Webcentral). The one documented way back in without your authenticator is a recovery request that asks for a photo of a government-issued ID (see below). Unless you turn on iCloud backup or export a backup file in Novaz, its keys exist only on your iPhone, so that phone is the only place your codes come from. Plan for that before you switch it on.
Turn on 2FA with an authenticator app
The steps from Webcentral's profile article (Webcentral):
- Log in to the Hosting Panel at theconsole.webcentral.au.
- Click your initials in the top-right corner, then Profile.
- In the left sidebar, click Security.
- Find the Two-factor authentication section. Until you set it up, it shows a warning that 2FA hasn't been configured. Click the slider next to Two-factor authentication.
- The Enable two-factor authentication dialog opens with a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it.
- Type the six-digit code from Novaz into the boxes in the dialog. The screenshot shows an Enable button to finish.
The dialog in Webcentral's screenshot doesn't show a setup key you can type. It offers a link instead, for when scanning doesn't work and you're on a mobile device. Webcentral doesn't explain what the link does. If you're setting this up on the same iPhone that runs Novaz, the dependable route is a screenshot of the QR code: tap +, then Choose a photo, and pick the screenshot. Delete the screenshot afterwards. See scanning a QR code on the same iPhone.
Webcentral's pages don't say how often its codes change. Because you scan the QR code, Novaz picks up the settings from it, so you don't need to know.
When Webcentral asks for a code
Once 2FA is on, logging in to the Hosting Panel takes your username, your password and a six-digit code from your authenticator app (Webcentral). The help doesn't mention an option to remember a device, so expect the code at every login.
Webcentral's email products have their own, separate two-factor settings. Titan Mail and OX Mail each set up 2FA inside webmail, with their own recovery codes (Webcentral, Webcentral). Turning on 2FA in the Hosting Panel doesn't cover those mailboxes, and this guide is about the Hosting Panel only.
If Webcentral rejects your code
Webcentral's help doesn't cover rejected codes. A clock that has drifted is the usual reason: on iPhone, go to Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the iPhone's clock is 15 seconds or more off. Check that you're reading the Webcentral entry in Novaz, not another account. More fixes are in Authenticator code not working?
If you lose your authenticator
Webcentral runs account recovery from a page in the Hosting Panel (Webcentral):
- Go to theconsole.webcentral.au/recovery.
- Click 2FA Removal. This is the option for accounts with 2FA turned on that can no longer make codes.
- Answer the questions and give the information it asks for.
- Complete the online identity check, which needs a photo of a government-issued ID.
- Webcentral's support team processes the request and tells you when access is back.
The help doesn't say how long this takes. If your email address or phone number is also gone, the same page has a separate Lost Access to Hosting Account option. When you deal with support by phone, chat or ticket, Webcentral may also ask for the Support PIN shown in your Hosting Panel (Webcentral). It's worth noting that PIN somewhere safe while you can still log in.
For what to do in the first hours after losing a phone, see Lost the phone with your authenticator app?
Changing phones or turning 2FA off
Webcentral's help doesn't describe either. The setting is a slider in the Two-factor authentication section, but the article only covers switching it on, so we can't say what turning it off asks for. With a Novaz iCloud backup or backup file, you can restore your accounts on a new iPhone. Without one, a new phone means adding Webcentral again in Novaz. Do that while the old phone still works and you can still log in. See How to transfer your authenticator app to a new iPhone.
