Turn On Two-Factor Authentication for Your Client Area

Two-factor authentication (2FA) adds a second check when you log in: as well as your password, you enter a six-digit code from an app on your phone. Even if someone steals or guesses your password, they can’t get into your account without your phone.

Because your client area controls your domains, hosting and payments, we strongly recommend turning 2FA on. The steps below apply when the Security Settings page offers two-factor authentication; if you don’t see it, open a ticket and we’ll tell you what is available.

Before you start

• Install an authenticator app on your phone, for example Google Authenticator, Microsoft Authenticator, 2FAS, or the authenticator built into a password manager such as Bitwarden or 1Password.
• Have a safe place ready for your backup code: a password manager, or a printed note kept somewhere secure (not a screenshot in your phone’s gallery).
• Make sure your phone’s date and time are set automatically. Codes are time-based and fail if the clock is wrong.

Step by step

1. Log in at app.fimurohost.com.
2. Open the account menu at the top right of the client area (it shows your name, for example Hello, Rahim!) and choose Security Settings.
3. In the Two-Factor Authentication section, click the option to enable it.
4. If you are asked to choose a method, select Time-Based Tokens (this works with the authenticator apps above).
5. A QR code appears. In your authenticator app, tap + or Add account and scan the QR code. If you can’t scan it, choose the manual entry option in the app and type in the secret key shown under the QR code.
6. The app now shows a six-digit code for FimuroHost that changes every 30 seconds. Type the current code into the client area and confirm.
7. A backup code is displayed. Save it now. It is shown only once and is your way back in if you lose your phone.

Logging in with 2FA

1. Enter your email and password as usual.
2. When prompted, open your authenticator app and enter the current code for FimuroHost.
3. If the code is about to change (the timer is nearly empty), wait for the next one to avoid it expiring while you type.

If you lose your phone or change phones

• Changing phones: before resetting your old phone, either move your accounts using the app’s transfer or backup feature, or log in, turn 2FA off in Security Settings, and set it up again on the new phone.
• Lost phone: on the code screen, choose the option to log in with your backup code. After you get in, you may be given a new backup code; save it, then set up 2FA again on your new device.
• Lost phone and backup code: message us on WhatsApp at 01818160926 (you need to be logged in to open a ticket). For your protection we will need to verify your identity before removing 2FA, so this can take a little time.

Turning 2FA off

Go to Security Settings and choose to disable two-factor authentication. You may need to confirm with your password. We only recommend this while switching devices.

Common problems

Never share your 2FA code or backup code with anyone. FimuroHost will never ask for them.

Need help?

If anything here doesn't match what you see, or you get stuck, open a support ticket from your client area or message us on WhatsApp at 01818160926. We're happy to help.