Two-factor authentication adds an additional layer of security by adding a second step to the login process. The threat of a leaked password is lessened with 2FA. But it also adds additional risk.
Enable Time Based Tokens
With Time Based Tokens, you need an app installed on your token device (typically a smartphone) that knows the secret key for your account and generates new one-time passwords (6-digit codes) every 30 seconds. When you log in, you will be asked to enter this 6-digit code after entering your username and password.
To enable it for your client area account:
- From the Client Area, navigate to Hello, Name! > Security Settings.
- Click "Click here to Enable".
- Select "Time Based Tokens".
- Click "Get Started".
- Scan the QR code with an authenticator app such as Google Authenticator or Duo Mobile.
- Type in the 6-digit code that the authenticator app generates.
- Click Submit.
- Record the Backup Code in a safe place.
- Click Close.
WARNING!!!
If you lose your device and forget the backup code, there is no way to get back to your client area account. Make absolutely sure that you store the backup code in a safe place.
We recommend enabling 2FA in your hosting control panel. If you enable 2FA in your hosting control panel (and not in the client area) and lose your backup code and device, you can contact support to reset 2FA.