Overview
This article provides information about Multifactor Authentication and why it's important to enable it on your account.
Background
Multifactor Authentication (MFA) is an effective solution that increases the security of your account. It requires the following:
- Your username and password.
- A one-time passcode, which you enter before you can gain access to your DreamHost account.
This second layer of security helps protect your account from hackers and website hijackers. This is accomplished by using any MFA app that can scan a QR code, such as the Google Authenticator app or a Yubikey within the panel.
To enable MFA in the panel, visit one of these articles depending on which application you'd prefer to use:
- Using the Google Authenticator app with Multifactor Authentication
- Using YubiKey with Multifactor Authentication
For more information about using Multifactor Authentication, see the Multifactor Authentication FAQs article.
New login page
After you enable Multifactor Authentication, the DreamHost login page changes depending on whether you're logging in for the first time or using a new device to sign in.
Panel login page
The following panel login screen opens when you first log in:
Two fields appear:
- Multifactor Authentication Code: Enter the 6-digit passcode generated by your mobile device.
- Remember this computer for: From this dropdown menu, choose from the options how long you wish your computer to store this code.
When logging in from a new device
DreamHost email service does not support Multifactor Authentication (MFA).
Multifactor Authentication uses browser cookies to function. If you try to log in from a new computer that has never logged in to your DreamHost panel before, then the Multifactor Authentication Code field is not initially visible, and your first login attempt will fail. After that first attempt, DreamHost identifies your account and makes the Multifactor Authentication Code field visible so that you can log in.