https://docs.whmcs.com/9-1/tags/two-factor-authentication/Recent content in two-factor-authentication onHugo -- gohugo.iohttps://docs.whmcs.com/9-1/system/authentication/two-factor-authentication/Mon, 01 Jan 0001 00:00:00 +0000https://docs.whmcs.com/9-1/system/authentication/two-factor-authentication/Compares the three 2FA services (Time-Based Tokens, Duo Security, YubiKey), lists where clients and admins configure 2FA, covers server-clock-mismatch error messages, and links troubleshooting articles for common 2FA issues.https://docs.whmcs.com/9-1/system/authentication/duo-security/Mon, 01 Jan 0001 00:00:00 +0000https://docs.whmcs.com/9-1/system/authentication/duo-security/Explains retrieving the Duo Client ID, Client Secret, and API hostname from the Duo Security admin portal to configure it at Configuration > System Settings > Two Factor Authentication, the admin email/license-key format Duo uses, and how to reactivate a user’s 2FA after a lost device.https://docs.whmcs.com/9-1/troubleshooting/troubleshoot-authentication/2fa-storage-migration-messages/Mon, 01 Jan 0001 00:00:00 +0000https://docs.whmcs.com/9-1/troubleshooting/troubleshoot-authentication/2fa-storage-migration-messages/Explains the two 2FA storage-migration messages on the Two-Factor Authentication page, the matching System Health warning for the same issue, and the Begin Migration button used to resolve them.https://docs.whmcs.com/9-1/troubleshooting/troubleshoot-authentication/duo-security-login-failures/Mon, 01 Jan 0001 00:00:00 +0000https://docs.whmcs.com/9-1/troubleshooting/troubleshoot-authentication/duo-security-login-failures/Covers the Activity Log error “invalid_client: Integration type does not support frameless access” for Duo Security 2FA, caused by Duo retiring its iframe prompt, and the fix: make a login attempt, then activate Universal Prompt in the Duo admin account’s Applications settings.https://docs.whmcs.com/9-1/troubleshooting/troubleshoot-cron-issues/system-timezone-issues/Mon, 01 Jan 0001 00:00:00 +0000https://docs.whmcs.com/9-1/troubleshooting/troubleshoot-cron-issues/system-timezone-issues/Covers timezone symptoms like incorrect timestamps, two-factor authentication code errors, and cron frequency warnings, attributes them to a mismatch between the webserver’s and cron engine’s PHP date.timezone settings, and gives steps to compare them via SSH before updating the server clock, php.ini, or cron command.https://docs.whmcs.com/9-1/system/authentication/authentication-tutorials/enable-2fa-globally/Mon, 01 Jan 0001 00:00:00 +0000https://docs.whmcs.com/9-1/system/authentication/authentication-tutorials/enable-2fa-globally/Lists the steps to activate a 2FA service at Configuration > System Settings > Two Factor Authentication, including the Enable for use by Clients and Enable for use by Administrative Users checkboxes and saving the configuration.https://docs.whmcs.com/9-1/system/authentication/authentication-tutorials/enable-2fa-for-admins/Mon, 01 Jan 0001 00:00:00 +0000https://docs.whmcs.com/9-1/system/authentication/authentication-tutorials/enable-2fa-for-admins/Provides the six-step process for an admin to enable Time-Based Token 2FA from My Account, including scanning the QR code, entering the authenticator app code, and recording the backup code.https://docs.whmcs.com/9-1/system/authentication/authentication-tutorials/enable-2fa-for-clients/Mon, 01 Jan 0001 00:00:00 +0000https://docs.whmcs.com/9-1/system/authentication/authentication-tutorials/enable-2fa-for-clients/Walks through enabling Time-Based Token 2FA from Security Settings in the Client Area, including scanning the QR code and recording the backup code, and notes that admins can disable but not enable 2FA for users at Clients > Manage Users.https://docs.whmcs.com/9-1/system/authentication/authentication-tutorials/log-in-without-a-backup-code/Mon, 01 Jan 0001 00:00:00 +0000https://docs.whmcs.com/9-1/system/authentication/authentication-tutorials/log-in-without-a-backup-code/Gives the SQL command to clear the authmodule and authdata fields in the tbladmins database table for a self-hosted installation, letting a locked-out admin log in without 2FA and reconfigure it on a new device.https://docs.whmcs.com/9-1/system/authentication/authentication-tutorials/log-in-without-a-token/Mon, 01 Jan 0001 00:00:00 +0000https://docs.whmcs.com/9-1/system/authentication/authentication-tutorials/log-in-without-a-token/Explains the 16-character backup code format, then gives separate step-by-step logins using the Login using Backup Code link for the Admin Area and Client Area, plus how an admin disables 2FA afterward via My Account.https://docs.whmcs.com/9-1/system/authentication/authentication-tutorials/require-2fa/Mon, 01 Jan 0001 00:00:00 +0000https://docs.whmcs.com/9-1/system/authentication/authentication-tutorials/require-2fa/Details the Global Two-Factor Authentication Settings checkboxes at Configuration > System Settings > Two Factor Authentication that force users and admins to set up 2FA on their next login.