---
title: "How to enable two-factor authentication (2FA)"
url: https://help.endercloud.in/docs/how-to-enable-two-factor-authentication
category: "Account & Security"
type: Guide
tags: ["2fa", "account", "login", "security"]
keywords: "two factor, two-step verification, authenticator app, google authenticator, authy, microsoft authenticator, otp, 6 digit code, recovery codes, lost phone, account security, hacked account, enable 2fa, how to enable 2fa, turn on 2fa, two factor authentication, 2 step verification, disable 2fa, 2fa code not working, lost 2fa device, billing 2fa, game panel 2fa, totp, secure my account"
difficulty: beginner
time: "5 minutes"
updated: 2026-11-14
source: Endercloud Knowledge Base (official)
---

# How to enable two-factor authentication (2FA)

> Turn on 2FA under Account → Security in the billing panel and on the Game Panel's account security page, using an authenticator app like Google Authenticator.

Two-factor authentication (2FA) asks for a 6-digit code from your phone each time you log in, as well as your password. Even if someone steals your password, they can't get in without your phone. Endercloud has **two separate logins**, so turn 2FA on in **both** places: the billing panel and the Game Panel.

## Before you start: install an authenticator app

Install any free authenticator app on your phone, for example:

-   **Google Authenticator** (Android and iPhone)
    
-   **Microsoft Authenticator** (Android and iPhone)
    
-   **Authy** (Android and iPhone)
    

All of them work the same way: you scan a QR code once, and the app then shows a new 6-digit code every 30 seconds.

## Turn on 2FA in the billing panel

1.  Log in to the [billing panel](https://billing.endercloud.in).
    
2.  Go to **Account → Security**.
    
3.  Under **Two-factor authentication**, click **Enable**. A QR code appears.
    
4.  In your authenticator app, add a new account and scan the QR code.
    
5.  Type the 6-digit code from the app into the billing panel to confirm.
    
6.  If you're shown backup or recovery codes, save them somewhere safe.
    

## Turn on 2FA on the Game Panel

1.  Log in to [panel.endercloud.in](https://panel.endercloud.in). See [How to log in to the Game Panel](/docs/how-to-log-in-to-the-game-panel) if you need help.
    
2.  Open your account page ([panel.endercloud.in/account](https://panel.endercloud.in/account)) and go to the **Security** section.
    
3.  Choose to enable two-step verification. A QR code appears.
    
4.  Scan it with your authenticator app.
    
5.  Enter the 6-digit code from the app (the panel may also ask for your current password) and confirm.
    
6.  The panel shows a list of **recovery codes**. Save them before you close the window.
    

> **Warning:**
> **Save your recovery codes.** Write them down or store them in a password manager, not only on the same phone. Each code works once and lets you in if you lose your phone.

## Tips

-   If codes are rejected, check that your phone's date and time are set to automatic. Authenticator codes depend on the correct time.
    
-   Getting a new phone? Move your authenticator accounts to it before you reset or sell the old one. Most apps have a transfer or backup option.
    
-   Never share a 2FA code with anyone. Endercloud staff will never ask for one.
    
-   On **Account → Security** in the billing panel, check **Sessions** now and then. It lists each device, IP and last active time, and **Log this session out** signs out any device you don't recognise.
    

## Frequently asked questions

**Q: I lost my phone and my recovery codes. How do I get back in?**

Open a ticket, or email support@endercloud.in, **from the email address on your account**. Our team will verify that you own the account before removing 2FA, so it may take a little time.

**Q: I sign in with Google or Discord. Do I still need 2FA?**

Turn on 2FA in your Google or Discord account too, since that account is your key to the billing panel. And enable 2FA on the Game Panel, which has its own login.

**Q: Does 2FA protect SFTP?**

SFTP uses your Game Panel password directly, without a 2FA code. Use a strong, unique Game Panel password and don't share it. Give other people access with sub-users instead.