Using Two-Factor Authentication

From WHMCS Documentation

Client accounts, users, and admins can begin to use Two-Factor Authentication after you have activated one or more services and configured the installation.

In the Client Area

2fa-disabled.png

To set up Two-Factor Authentication using Time-Based Tokens:

  1. From the Client Area, navigate to Hello, Name! > Security Settings.
  2. Click Click here to Enable.
  3. Select Time Based Tokens.
  4. Click Get Started.
  5. Scan the QR code with an authenticator app like Google Authenticator or Duo Mobile.
  6. Enter the 6-digit code that the authenticator app generates.
  7. Click Submit.
  8. Record the Backup Code in a safe place.
  9. Click Close.
Configuring Time Based Tokens in Client Area

In WHMCS 8.0 and later, admins can disable (but not enable) Two-Factor Authentication for individual users at Clients > Manage Users.

In the Admin Area

Configuring Time Based Tokens in Admin Area

Admins can perform the following actions to set up Two-Factor Authentication on their accounts using the Time-Based Tokens service:

  1. From the Admin Area, navigate to Account > My Account or, prior to WHMCS 8.0, My Account.
  2. Toggle Two-Factor Authentication to On.
  3. Select Time Based Tokens.
  4. Click Get Started.
  5. Scan the QR code with an authenticator app like Google Authenticator or Duo Mobile.
  6. Enter in the 6-digit code that the authenticator app generates.
  7. Click Submit.
  8. Record the Backup Code in a safe place.
  9. Click Close.

2FA 004.png