# How to Enable Two-Factor Authentication on the Beacon Hosting Billing Panel > Learn how to enhance your account security by enabling two-factor authentication (2FA) on the Beacon Hosting billing panel. Source: https://www.beaconhosting.org/knowledgebase/how-to-enable-two-factor-authentication-on-the-beacon-hosting-billing-panel Category: Account Management Last updated: 2026-09-09 # How to Enable Two-Factor Authentication (2FA) on Your Beacon Hosting Account **Two-factor authentication (2FA)** adds an additional security step to your Beacon Hosting account. After entering your password, you must provide a **6-digit verification code** generated by an authenticator app. This means that knowing your password alone is not enough to sign in to your account. Beacon Hosting uses **TOTP (Time-based One-Time Password)** authentication. SMS verification codes are not used. Compatible authenticator apps include **Google Authenticator, Authy, 1Password, Apple Passwords**, and other applications that support TOTP. > **[INFO]** Two-factor authentication is configured from the **Account** page, not the Billing section. ## How to Enable 2FA on Beacon Hosting ### Step 1: Sign In Sign in to your Beacon Hosting account. [Beacon Hosting Login](https://www.beaconhosting.org/auth/login) ### Step 2: Open Your Account Settings Open **Account** from your profile menu at the bottom of the sidebar. You can also open the Account page directly: [Beacon Hosting Account](https://www.beaconhosting.org/account) ### Step 3: Find Two-Factor Authentication Find the **Two-factor authentication** card. If 2FA is not currently configured, its status should show: **Disabled** ### Step 4: Enter Your Current Password Enter your **Current password**. Your Beacon Hosting account must have a password set before you can enable 2FA. If you normally sign in using Google and have never configured a Beacon Hosting password, set a password using the **Password** card on the Account page first. ### Step 5: Start 2FA Setup Click: **Enable 2FA** A **Set up two-factor authentication** dialog will appear. ### Step 6: Add Beacon Hosting to Your Authenticator App Your authenticator app needs the TOTP secret provided by Beacon Hosting. You can either: * **Scan the QR code** with your authenticator app, or * Copy the displayed secret and enter it manually into the authenticator app Your authenticator app will then generate a 6-digit verification code. ### Step 7: Verify 2FA Enter the current **6-digit Verification code** generated by your authenticator app. Click: **Verify & enable** If the verification succeeds, 2FA will be enabled. The Two-factor authentication card should now show: **Enabled** You should also see: **Your account is protected.** ## What Authenticator Apps Can I Use? Beacon Hosting uses the standard **TOTP** authentication method, so you can use an authenticator application that supports TOTP. Examples include: * Google Authenticator * Authy * 1Password * Apple Passwords * Other compatible TOTP authenticator applications The authenticator app generates a new 6-digit code periodically. You do not need an SMS message to sign in. ## What Happens When I Log In With 2FA Enabled? After enabling 2FA, the login process requires both your password and an authenticator code. The process is: 1. Enter your Beacon Hosting email address. 2. Enter your password. 3. Enter the 6-digit authenticator code when prompted. 4. Complete the login. You can paste the code or type it manually. The verification form submits automatically when all 6 digits have been entered. ## How Often Does the 2FA Code Change? TOTP verification codes are time-based and typically change approximately every **30 seconds**. Always use the newest code displayed by your authenticator app. If a code has almost expired, wait for the next code rather than repeatedly entering an old one. ## How to Disable 2FA You can disable two-factor authentication from the same **Two-factor authentication** card on the Account page. To disable it: 1. Open **Account**. 2. Find **Two-factor authentication**. 3. Enter your **Current password**. 4. Enter a current **Authenticator code**. 5. Click **Disable 2FA**. 2FA will be removed from your account after the verification succeeds. [Open Account Settings](https://www.beaconhosting.org/account) ## What If I Lose My Authenticator App? Beacon Hosting does **not issue backup codes**. Because of this, make sure you have a reliable way to access your authenticator account or securely retain the TOTP setup information needed to restore your authenticator. If you retain the TOTP secret, **store it securely**. Anyone who obtains the secret may be able to generate valid authentication codes for your account. Do not store your secret in a public document, screenshot, chat, or unsecured file. ## What If I Cannot Sign In Because I Lost 2FA Access? If you cannot generate a valid authenticator code and therefore cannot sign in, contact Beacon Hosting support from another account or open a support ticket. [Open a Beacon Hosting Support Ticket](https://www.beaconhosting.org/billing/tickets) Support may need to verify ownership of the account before helping recover access. **Never send your password or TOTP secret in a support ticket.** ## Two-Factor Authentication Troubleshooting ### Enable 2FA stays disabled or shows a password error Make sure you are entering your **current Beacon Hosting account password**. The password field does not accept your authenticator code. If you normally sign in with Google and have never created a Beacon Hosting password, set one on the **Password** card first. ### My verification code is rejected Make sure you are entering the newest 6-digit code from your authenticator app. TOTP codes normally rotate approximately every 30 seconds. Also check that your device's date and time are correct and preferably configured to update automatically. An incorrect device clock can cause TOTP codes to be rejected. ### I never see the QR code The password verification step must succeed before the 2FA setup dialog appears. If the setup dialog does not appear: 1. Return to the Account page. 2. Refresh the page. 3. Open the **Two-factor authentication** card again. 4. Confirm your current password is correct. 5. Try **Enable 2FA** again. ### My authenticator app does not scan the QR code If your camera cannot scan the QR code, use the manual setup option instead. Copy the secret displayed by Beacon Hosting and enter it into your authenticator app as a TOTP account. ### I entered the code too late TOTP codes expire regularly. Wait for a new code to appear in your authenticator app and enter the new code. ### I changed phones If your authenticator application supports account or authenticator backup, restore your authenticator accounts on the new device. If you cannot restore the Beacon Hosting TOTP configuration and cannot sign in, contact support for account recovery. ## Is 2FA Worth Enabling? **Yes.** Two-factor authentication provides an additional layer of protection for your Beacon Hosting account. Your hosting account can provide access to important server resources, files, configurations, and other account functionality. Protecting it with both a password and a separate authentication factor reduces the risk associated with a compromised password. For the best protection: * Use a strong, unique password. * Enable 2FA. * Keep your authenticator account secure. * Never share authentication codes. * Never share your TOTP secret. * Do not reuse your Beacon Hosting password on other websites. ## Quick Answer: How Do I Enable 2FA? To enable two-factor authentication on Beacon Hosting: 1. Sign in to your account. 2. Open **Account**. 3. Find **Two-factor authentication**. 4. Enter your current password. 5. Click **Enable 2FA**. 6. Scan the QR code with a compatible TOTP authenticator app. 7. Enter the 6-digit verification code. 8. Click **Verify & enable**. Once enabled, Beacon Hosting will require an authenticator code in addition to your password when you sign in.