Two-Factor Authentication

Two-Factor Authentication (2FA) enhances security by requiring both a password and a second step like a login code from a mobile device.


Duo® Security

Duo® Security is a two-factor authentication (2FA) option that combines traditional account credentials with device-based verification.


Enable 2FA Globally

Before you can enable two-factor authentication (2FA) for users or admins, you must enable it globally for your WHMCS installation.


Enable 2FA for Admins

Configure two-factor authentication (2FA) for Admin Area logins. 2FA enhances security by adding a second step to the login process.


Enable 2FA for Clients

Configure two-factor authentication (2FA) for Client Area logins. 2FA enhances security by adding a second step to the login process.


Log In Without a Backup Code

You can restore access to the Admin Area or Client Area after the loss of a two-factor authentication (2FA) device and backup code.


Log In Without a Token

If users or admins lose their two-factor authentication (2FA) device, they can regain access to WHMCS using their 2FA backup code.