Enabling Two-Factor Authentication in DirectAdmin (Two-Factor Identity Verification)

To enable 2FA (2-Factor Authentication) for logging in to your DirectAdmin account (two-factor identity verification), you will need to install an application on your smartphone.

This application functions as a second authentication factor for your DirectAdmin login. This means that for your successful DirectAdmin login, you will need to provide your password, and additionally a unique code (one-time password) from your smartphone each time you want to log in.
We recommend Two-factor authentication for better security on your account.

Three recommended free applications for your mobile:

2FA Authenticator (2FAS):
For Android: https://play.google.com/store/apps/details?id=com.twofasapp
For iOS: https://apps.apple.com/us/app/2fa-authenticator-2fas/id1217793794

Google Authenticator:
For Android: https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=en
For iOS: https://itunes.apple.com/gr/app/google-authenticator/id388497605?mt=8

FreeOTP:
For Android: https://play.google.com/store/apps/details?id=org.fedorahosted.freeotp
For iOS: https://itunes.apple.com/us/app/freeotp-authenticator/id872559395?mt=8

(You can also find several other similar applications with a relevant search)

1. You enter DirectAdmin by typing your domain domainname.tld:2222 and log in.
2. You select Two-Step Authentication from the Advanced Features menu. Click the GENERATE SECRET button.
   
3. Next, you scan the QR-code that will appear with the authenticator app you downloaded and enter the code that your app will display. Click the “ENABLE TWO-STEP AUTHENTICATION” button.
4. Two-factor authentication has been enabled. Also, a list of recovery codes has appeared for you to use in case you don’t have access to the authentication application. We recommend downloading this list and keeping it in a safe place.
5. Log out and try to log in again. After entering your password, you must also enter the random password generated by the app on your mobile phone.

Scratch codes:
You may use Scratch Codes only in case of loss of the application or your mobile phone – with scratch codes you can have access to your account in such a case. Keep the scratch codes in a SAFE place and do not share them. Optionally, you may click the Print button and print the page, which you must keep in a SAFE place until they expire.

Each scratch code is single-use. So if you ever use a scratch code, it’s better to erase it so you don’t try to use it again.

Repeat the scratch code generation process when the codes expire.
In case of loss of both your device and the scratch codes, you should send a request to our HelpDesk.