Set up two-factor authentication

Two-factor authentication (2FA) protects your account with a temporary code in addition to your password. A leaked or reused password is therefore not enough to sign in. Enable 2FA for every user who can access websites, email, DNS or billing.

Before you begin

Install an authenticator app that supports time-based codes, such as Google Authenticator, Microsoft Authenticator, 1Password or Authy. Make sure your phone sets its date and time automatically; an incorrect clock can invalidate codes.

Enable 2FA

1. Select your avatar in the top-right corner and open My account.
2. Go to Two-factor authentication and select Enable.
3. Open your authenticator app and add a new account.
4. Scan the QR code. If scanning is not possible, use the manual setup key when one is offered.
5. Enter the current six-digit code in the OS Cloud panel to confirm the connection.
6. Store any recovery codes immediately in a secure password manager. Do not keep them only on the same device as your authenticator.
7. Sign out and test once that you can sign in again with your password and 2FA code.

DANGER

A QR code or manual 2FA setup key is secret. Never share a screenshot of it with colleagues or support.

If a code is rejected

• Wait for a new code and enter it before the timer expires.
• Confirm that the date, time and time zone on your phone are synchronised automatically.
• Make sure you are using the code for the correct OS Cloud account.
• Use a recovery code if you no longer have access to your authenticator and stored one safely.

If you cannot sign in and have no recovery method, contact support. To protect your account, identity and authorisation checks may be required before 2FA can be reset.