2FA, or two-factor authentication, adds a second check when you log in. Even if someone steals your password, they still need the code from your phone or inbox. It takes a few seconds per login. It stops the vast majority of account takeovers.
Why passwords are not enough
Passwords leak in data breaches every week. Many people reuse the same password on several sites. Attackers try leaked passwords automatically on hosting panels, e-mail and banks. Your hosting account controls your domains, sites and billing, so it deserves extra protection.
2FA methods you can choose
- Authenticator app: a six-digit code that changes every thirty seconds.
- E-mail code: a one-time code sent to your inbox.
- Recovery codes: backup codes for when you lose your phone.
An authenticator app is the strongest everyday choice. It works offline and cannot be intercepted like a text message.
Turn it on in HostiGuard
- Log in and open your account settings.
- Choose the security section and select 2FA.
- Scan the QR code with an authenticator app.
- Enter the code shown in the app to confirm.
- Save your recovery codes in a safe place.
Our knowledge base shows each screen step by step.
Good habits
Store recovery codes in a password manager or print them and lock them away. Do not share codes with anyone, including people who claim to be support staff. If you change phones, move the authenticator before you reset the old device.
Protect the whole team
If several people manage your services, give each one a separate login. Ask everyone to enable it. Remove access on the day someone leaves. These small rules make your hosting, domains and invoices much harder to steal.
What if you lose your phone?
Use one of your recovery codes to log in. Then remove the old device and scan a new QR code. If you lost the codes too, contact support from your registered e-mail. We will verify your identity before resetting anything. This check protects you, even if it takes a little longer.
