Two-step authentication in ISPmanager

What does two-step authentication do and where to find it in the ISPmanager panel? The secure method of authorization and login to the server control panel gives your data additional protection. Along with the login and password, you need to enter a unique code, which the user receives from Google, at each login.

How to make two-step authentication when logging into the ISPmanager control panel

• Download and install the Google Authenticator app on your mobile device from the Play Market or App Store. This application is supported on Android starting with version 2.1, as well as iPhone and iPad. 
It can function without an internet or cellular connection.

• In the control panel, go to Settings - User Settings.
• Select on the option "Enable two-step authentication".
• The screen will display "QR Code", "Account Name" and "Key" which you can enter manually.
• Open Google Authenticator on your mobile device.
• Tap "Get Started" and then select "Add Code."
• Select one of the available options: "Scan QR code" or "Enter a customization key".

If you have chosen the first option - point the camera of your mobile device at the QR code displayed in the control panel. A six-digit code will appear on the display.

If the app is unable to recognize the barcode - select "Enter Setup Key" and enter the "Account Name" + "Key" specified in the control panel. A six-digit numeric password will appear on the screen.

• Paste the obtained password into the "Temporary Code" field in the control panel.
• Click "Activate".

The ISPmanager panel will ask you to confirm the entered passwords in the "User Settings" section. Click "Save".

CAUTION: The time on the server and on the mobile device with Google Authenticator must be synchronized. If the received code from Google Authenticator does not match, check the date and time settings on the server, as well as the settings of the Google Authenticator application itself.

How to check authentication server settings

Go to "Settings" in the hosting panel - "Time Correction for Codes" - "Synchronize". You will see a confirmation about the time synchronization. It only affects the internal time settings of the Google Authenticator app and does not affect your device's time and date settings.

If there is no "Settings" section in Google Authenticator - check the time synchronization in your device's date and time settings.

How to disable two-step authentication

To disable two-factor authentication in the ISPmanager control panel, perform the following actions:

• Go to Settings - User Settings.
• Click the "Disable two-factor authentication" button. The ISPmanager panel will ask you to confirm the entered passwords.
• Click "Save".

Authentication for root and admin for protection and securit

It is possible to activate two-factor authentication for root and admin accounts, but there are some nuances to consider.

If you activate this feature for root and log in using the corresponding login and password, you will not automatically switch to the admin account. After logging in, you will need to go to Manage - Employees, then select admin and click "Login".

If two-factor authentication is enabled for an administrator - when logging in, use that administrator's username and password instead of the root account. Make sure that the password for the admin account was set earlier in Manage - Employees - Change.

Authorization with activated two-factor authentication

Follow the steps below to log in to your account:

• Enter your account username and password.
• Tap the Sign in button.
• Open the Google Authenticator app on your mobile device.
• Enter the temporary 6-digit password generated by the app.
• Tap "Ok."

Summary

ISPmanager allows you to strengthen data and profile protection with two-factor authentication. The login process takes place in two steps: first, login and password are entered, and then a unique one-time code is entered. Security is paramount!