Enabling 2FA
In cPanel, go to Security → Two-Factor Authentication.
Click Set Up Two-Factor Authentication.
Scan the displayed QR code using Google Authenticator, Authy, or any TOTP-compatible app.
Enter the 6-digit code generated by the app to confirm setup.
Click Configure Two-Factor Authentication.
Restricting access by IP (extra layer)
Go to Security → IP Blocker to explicitly deny known malicious IP ranges.
For tighter control, ask your host about restricting cPanel login entirely to a specific allowlist of IPs if you always connect from the same office/location.
Additional cPanel security habits
- Change your cPanel password every 90 days, and never reuse it across other services.
- Review Security → SSH Access and disable it if you don’t actively use SSH.
- Regularly check Security → Manage API Tokens and revoke any tokens you don’t recognize or no longer use.
Security matters more than ever for growing businesses — Sysop Solutions’ managed hosting plans include proactive account monitoring, so our team often catches suspicious activity before it becomes a problem. Get in touch to learn more.
