Two-Factor Authentication


Two-Factor Authentication

Last updated February 19th, 2018

Two-factor authentication (2FA) is an additional layer of protection to secure your account against unauthorized logins even in the event that someone knows your password. SiteHost recommends 2FA be enabled for all accounts.

How does it work?

With 2FA enabled, you are required to provide something you know (your password) and something you have (your mobile phone) in order to log in.

When you login to the SiteHost Control Panel, you will enter your username and password as usual. You will then be prompted to enter a 6 digit code that is generated from an app like Google Authenticator from your iOS or Android phone. Alternative TOTP compatible apps such as Authy are also supported.

Two-factor authentication login

How do I enable 2FA?

  1. Install your preferred 2FA app.
  2. Visit the SiteHost Control Panel.
  3. Go to the My Account module.
  4. Click Manage 2FA under Account Information.
  5. Click Add 2FA Method.
  6. Open your 2FA app and follow the on screen steps. Scan the QR code or manually enter the code if it fails.
  7. Enter the 6 digit code shown on your app to confirm that you have successfully added the method.

Adding two-factor authentication

How do I disable 2FA?

  1. Visit the SiteHost Control Panel.
  2. Go to the My Account module.
  3. Click Manage 2FA under Account Information.
  4. Find the 2FA method you want to disable and click the remove icon.
  5. You may be prompted to enter your 2FA code if activated as a security check.


  • I lost my phone or my code doesn't work!

Please contact us over phone or email. Be prepared to provide proof of account ownership.

  • My method says PENDING ACTIVATION?

You have added a 2FA method but have not finished the enrollment process. Click on the method and follow the instructions to activate the method.

  • An expired token still works?

Tokens are valid for 30 seconds each, aligned to epoch time. The standard implementation allows the code before and after the current code to account for time drift between your device and our systems.

Can we improve this article? Suggest an improvement to this article.

Suggest an Improvement

Thank you for helping us to improve this Knowledge Base article. Please type your suggestions below:

Still need help? Get in touch with us.

If you aren't able to find the help you need then please send us a question and we can help you further.