Two-Factor Authentication (2FA) enhances security by adding a second step to the login process. It combines something that you know (for example, your password) with a second factor, typically from something that you have (for example, your phone). Requiring both to log in decreases the threat of a leaked password.

By default, 2FA is optional when you configure it, but admins can choose to require it for all admins and users on the WHMCS installation.

Require Two-Factor Authentication #

To require users and admins to configure 2FA on their next login:

1. Go to Two Factor Authentication. #

In the Admin Area, go to Configuration () > System Settings > Two Factor Authentication.

2. Configure the desired options. #

Under Global Two-Factor Authentication Settings, check the desired options.

3. Save your changes. #

Click Save Changes.

The next time that each user or admin logs in, the system will require them to set up 2FA.

Last modified: January 9, 2025