This article shows you how to enable two-factor authentication (2FA) on your Web60 account to add an extra layer of security.
What is Two-Factor Authentication
Two-factor authentication adds a second security step when you log into your Web60 account. Instead of just entering your password, you'll also need to enter a special code from your phone. This means even if someone gets your password, they can't access your account without your phone.
Step 1: Log Into Your Web60 Portal
- Go to the Web60 login page
- Enter your email address and password
- Click the "Login" button
If you're having trouble logging in, check our guide on login issues and password reset.
Step 2: Access Security Settings
- Once logged in, click on your name in the top right corner
- Select "Account Settings" from the dropdown menu
- Click on the "Security" tab on the left side
- Look for the "Two-Factor Authentication" section
Step 3: Download an Authenticator App
Before continuing, you'll need an authenticator app on your phone. The most common ones are:
- Google Authenticator (free)
- Microsoft Authenticator (free)
- Authy (free)
Download one of these from your phone's app store.
Step 4: Enable Two-Factor Authentication
- In the Security settings, click "Enable Two-Factor Authentication"
- A QR code will appear on your screen
- Open your authenticator app on your phone
- Tap the "+" or "Add" button in the app
- Point your phone's camera at the QR code on your computer screen
- The app will automatically add your Web60 account
Step 5: Enter the Verification Code
- Look at your authenticator app - it will show a 6-digit code for Web60
- Type this code into the box on your computer
- Click "Verify and Enable"
- You'll see a confirmation message that 2FA is now active
Step 6: Save Your Backup Codes
After enabling 2FA, you'll see a list of backup codes. These are important:
- Copy these codes and save them somewhere safe
- You can use these codes if you lose your phone
- Each backup code only works once
- Keep them separate from your phone (like in a password manager or written down)
Testing Your Setup
- Log out of your Web60 account
- Try logging in again
- After entering your password, you'll be asked for a 6-digit code
- Open your authenticator app and enter the current code
- You should now be logged in successfully
The codes in your authenticator app change every 30 seconds, so always use the current one shown.
If you need to change other account details like your email address, see our guide on changing your account email address.
If you're still stuck with setting up two-factor authentication, contact our support team through your Web60 portal. Include details about which step isn't working and any error messages you see.
FAQ
Q: What happens if I lose my phone?
A: Use one of the backup codes you saved when setting up 2FA. Each backup code works once to log you in, then contact support to reset your 2FA settings.
Q: Can I turn off two-factor authentication later?
A: Yes, go to Account Settings > Security and click "Disable Two-Factor Authentication". You'll need to enter a current code from your app to confirm.
Q: Why isn't the QR code scanning?
A: Make sure your phone camera has permission to access the camera, try moving closer or further from the screen, or manually enter the code shown below the QR code in your authenticator app.
Q: The 6-digit code isn't working when I try to log in
A: Check that your phone's time is correct - authenticator apps rely on accurate time. Wait for a new code to appear (they change every 30 seconds) and try again.
Q: Do I need to set up 2FA for WordPress separately?
A: No, this 2FA protects your Web60 account portal. Your WordPress admin login is separate - if you want to protect that too, you'll need a WordPress security plugin.
Q: Can I use SMS text messages instead of an authenticator app?
A: No, Web60 only supports authenticator apps for 2FA. These apps work without internet connection and are more secure than SMS.
Q: What if I get a new phone?
A: You'll need to disable 2FA on your old phone (or use a backup code), then set it up again on your new phone following these same steps.
Last updated: 1 March 2026