How to Setup Two-Factor Authentication for Reseller in WHM?

Configuring Two-Factor Authentication (2FA) for a reseller in WHM (Web Host Manager) is a crucial security measure that provides an additional layer of protection for the login process. Below is a step-by-step guide on how to activate 2FA for reseller accounts in WHM:

Step 1: Log in to WHM

1. Open your web browser and access your WHM panel by entering your server’s IP address or domain followed by /whm (e.g., https://yourdomain. com/whm).

2. Enter your root or reseller login credentials and log in to WHM.

Step 2: Search for Two-Factor Authentication

1. Once inside WHM, use the search bar on the left-hand side to search for Two-Factor Authentication.

2. Click on Two-Factor Authentication under the "Security Center" section.

Step 3: Enable Two-Factor Authentication

1. In the Two-Factor Authentication interface, you will see an option to enable 2FA.

2. Click on the Enable button if it is not already enabled.

Step 4: Configure 2FA for Reseller Accounts

1. After enabling the 2FA system, scroll down to the section labeled Manage My Account (for the reseller).

2. Click on Set Up Two-Factor Authentication.

3. You will see a QR code and a secret key. The reseller needs to scan this QR code using a compatible authenticator app such as Google Authenticator or Authy.

Step 5: Install and Set Up an Authenticator App

- On your mobile device, download and install Google Authenticator, Authy, or any other TOTP (Time-based One-Time Password) app.

- Open the authenticator app on your mobile device and scan the QR code displayed on the WHM page. If you can’t scan the QR code, manually enter the secret key provided on the WHM interface into the authenticator app.

Step 6: Verify the 2FA Setup

- Once you’ve scanned the QR code or entered the secret key into your authenticator app, the app will generate a six-digit verification code.

- Enter this code into the Security Code field in WHM.

- Click on Configure Two-Factor Authentication to complete the process.

Step 7: Confirm Success

- If the code is correct, WHM will display a success message indicating that 2FA is now enabled for the reseller account.

- If the code is incorrect, try rescanning the QR code or re-entering the secret key and ensure that the time on your mobile device is set correctly.

Step 8: Logging In with 2FA

- After enabling 2FA, the reseller will now be required to enter both their username and password and the six-digit code generated by the authenticator app when logging into WHM.

- Open the authenticator app on your mobile device during login and use the code to complete the login process.

Step 9: Managing 2FA (Optional)

- To manage or remove Two-Factor Authentication for a reseller, go back to the Two-Factor Authentication interface in WHM.

- In the Manage Users section, you can view, disable, or force 2FA for specific reseller accounts.

Step 10: Backup Codes (Optional)

- Some 2FA systems allow you to set up backup codes in case the reseller loses access to the authenticator app. It's a good idea to provide the reseller with backup codes for emergency situations.

- In WHM, there isn’t a default method for backup codes, so ensure the reseller has alternative access methods in case they lose their authenticator app.