Implementing Two-Factor Authentication in WHM

Introduction

In an era where cybersecurity threats are constantly evolving, implementing robust security measures is imperative for any server administrator. Two-Factor Authentication (2FA) is a crucial layer of security that adds an additional barrier to unauthorized access. In this tutorial, we will guide you through the process of implementing Two-Factor Authentication in WebHost Manager (WHM), a popular control panel for managing web hosting servers.

Prerequisites

Before you start implementing 2FA in WHM, ensure you have the following prerequisites in place:

1. Access to WHM: You should have administrative access to your WHM control panel.
2. SSH Access: You should have SSH access to your server as some tasks may require it.
3. Time-Based One-Time Password (TOTP) App: You need a TOTP app like Google Authenticator or Authy installed on your mobile device.

Step 1: Log in to WHM

1. Open your web browser and navigate to your WHM login URL (typically https://your-server-ip:2087).

2. Enter your WHM username and password to log in.

Step 2: Access the Two-Factor Authentication Interface

1. Once logged in, in the WHM dashboard, search for "Two-Factor Authentication" in the search bar or navigate to "Security Center" > "Two-Factor Authentication."

2. You will be taken to the Two-Factor Authentication interface.

Step 3: Enable Two-Factor Authentication

1. Click the "Manage My Account" button to configure 2FA for your account.

2. In the "Two-Factor Authentication" section, select "Configure Two-Factor Authentication."

3. Choose "Time-Based One-Time Password (TOTP)" as the authentication method.

4. Open your TOTP app on your mobile device and scan the QR code displayed on the WHM screen.

5. Enter the six-digit verification code generated by your TOTP app to confirm.

6. Click "Configure Two-Factor Authentication."

Step 4: Verify Two-Factor Authentication

1. After configuring 2FA, you will be prompted to verify it. Open your TOTP app, and enter the current verification code.

2. Click "Verify Two-Factor Authentication."

Step 5: Save Recovery Codes (Optional but Recommended)

1. WHM provides recovery codes that can be used if you lose access to your TOTP app. It's highly recommended to save these codes in a secure location.

2. Click "Generate New Recovery Codes," and then save them in a secure offline location.

Step 6: Two-Factor Authentication is Active

Congratulations! You have successfully implemented Two-Factor Authentication in WHM. From now on, whenever you log in to WHM, you will need to enter a verification code from your TOTP app in addition to your username and password.

Conclusion

Implementing Two-Factor Authentication in WHM is a fundamental step in enhancing the security of your web hosting environment. By adding this extra layer of protection, you significantly reduce the risk of unauthorized access to your server. Make sure to securely store your recovery codes and regularly update your TOTP app to keep your 2FA setup robust. In an ever-evolving threat landscape, proactive security measures like 2FA are essential for safeguarding your server and data.

The End! should you have any inquiries, we encourage you to reach out to the Vercaa Support Center without hesitation.