This article explains the functionality of a Two-factor authentication policy. Two-factor Authentication (2FA) - an additional layer of security, which requires Account Contacts to respond to a second authentication challenge when logging into CONTROL PANEL.

Enabling 2FA affects all account contacts.

As a Partner account contact, you can enable 2FA for account contacts and your sub-account contacts. When you log into sub-accounts, you will not be asked for 2FA twice. A set of 2FA settings that account contacts can modify depends on the role they are granted.

  • Private Label Owner: manages common and individual 2FA policies for account contacts and sub-accounts (enable/disable, reset, change the phone number, change 2FA method)
  • Private Label Operator: manages common and individual 2FA policies for sub-accounts only (enable/disable, reset, change the phone number, change 2FA method)
  • Private Label Billing/Customization/Sales: manages only their own 2FA settings (update the phone number, change 2FA method).

Read our Knowledge Base article on Account Contacts And Contact Roles for more information.

Enabling 2FA

To enable 2FA policy for all account contacts, log into  CONTROL PANEL > My Partner Account > Security Policies > Two-Factor Authentication Policy.


If you are the account administrator, you can also select a frequency range for account contacts to prove their identity when logging into the CONTROL PANEL.


Note: Account contacts themselves can select any method to use on their first login. They can also specify a cell phone number to use for authentication.

Note: In case you are the only one account contact listed in CONTROL PANEL and has issues resetting 2FA, please contact our Customer Service Team for assistance. They can be reached at 1-800-379-7729, option 4 for US and +44 (0)20 3384 2158, option 4 for UK.

Shared account contacts

Enabling 2FA on the account will affect account contacts, who already manage several accounts.

There are several scenarios of how the 2FA affects the shared account contacts:

  • Adding account contact with already enabled 2FA on another account on the account without 2FA will result in account contact with 2FA enabled.
  • Adding account contact without 2FA enabled on the account with 2FA will result in account contact with 2FA enabled

When shared account contact attempts to log into the CONTROL PANEL the compilation of the strongest password policies and 2FA policies of all accounts where this account contact is listed will be applied for authentication.

If the 2FA will be disabled on the account with shared account contact, the 2FA authentication will still be applied if 2FA is enabled on a separate account of this shared account contact.

Read our Knowledge Base article on Two-Factor Authentication methods for more information.