Why it matters
Two-factor authentication reduces the damage caused by stolen passwords. Hosting accounts control domains, email, invoices, websites, and sometimes server administration, so they are high-value targets.
Recommended use
Enable two-factor authentication for WHMCS client accounts, WHMCS administrators, WHM root and reseller users, cPanel users, domain registrar accounts, and vendor license accounts when available.
Recovery
Store recovery codes securely. If a device is lost, support may need to verify account ownership before resetting access.
Security baseline
- Use strong unique passwords.
- Enable two-factor authentication.
- Keep software updated.
- Remove unused users, scripts, themes, and plugins.
- Review logs after suspicious activity.
- Use backups before cleanup or repair.
Quick support handoff
If this article does not solve the issue, open a support ticket with the domain, service name, exact error, time the problem started, and what changed recently.
