Knowledge base

Turning on two-factor authentication

The single most useful thing you can do for your account, and it takes two minutes.

A password can be guessed, reused or phished. A second factor means a stolen password on its own is not enough.

Setting it up

Account settings → Sign-in & security. You have two choices:

A passkey — your device's fingerprint, face or PIN. Nothing to type, nothing to lose, and it cannot be phished because it only works on the real site. Choose this if your device supports it.

An authenticator app — a six-digit code that changes every thirty seconds. Works on any device, including one that does not support passkeys.

Recovery codes

You are shown a set of one-time recovery codes. Save them somewhere that is not the device you just enrolled — a password manager, or printed. They are how you get in when the phone is lost, and they are shown once.

Requiring it for everybody

If you have a team, Organisation → Security lets you require two factor for every member. Existing members are prompted at their next sign-in; nobody is locked out mid-session.

If you lose your device

Use a recovery code. If you have none, open a ticket — we can verify you by other means, and that process is deliberately slower than a code, because anything faster would be a way in for someone else.

Latest from the blog

What we have been writing about hosting, SEO and running sites at scale.

SEO and Link Building from the Hosting Layer: A 2026 Operator's View

How hosting shapes indexing and link equity in 2026: keeping pages indexed, vetting aged domains before you build on them, link building without a footprint, and an honest line on what infrastructure can and cannot do for SEO.

Read the post →

Making WordPress Fast and Secure: A Performance and Plugin Checklist

A practical checklist for fast, secure WordPress: server-level caching, a per-site object cache, the handful of plugins worth running, keeping the stack current, and the WooCommerce pages you must never cache.

Read the post →

How to Choose Managed Web Hosting in 2026: A Buyer's Guide

What actually separates good managed hosting from a cheap box with a control panel — migrations, backups, isolation, real caching and honest scaling — and how to judge it before you commit.

Read the post →

Read the blog →

Still stuck?

Support is included on every plan, the desk is open 24 hours a day, and you can write to us in any of our 58 languages — we answer you in yours.

Contact support → All articles →