Enable Two-Factor Authentication (2FA) for Webmail

2FA requires a smartphone with a supported time-based one-time password (TOTP) app. We suggest the following apps for AndroidTM and iOS®:

• Google AuthenticatorTM
• Duo Mobile

1. Log in to webmail either through the cPanel or the Webmail login portal
2. From the Webmail management screen (before you access RoundCube), under the header Edit Your Settings, select Two-Factor Authentication.
3. Click on "Set up Two Factor Authentication."
4. As the instructions mention, you must scan the displayed QR code in your authenticator app. You can also manually enter the details below if your app does not support the QR code reader.
   
5. Enter the code displayed on your authenticator app, then click the “Configure Two-Factor Authentication” button.
6. You should see this message after successful configuration
7. Next time you try to log in to your Webmail account, you will be prompted with this page. You have to enter the code that is displayed from your authenticator app in the input field, then click the Continue button to access your email.

References:

• https://support.cpanel.net/hc/en-us/articles/360051868994-Can-I-enable-two-factor-auth
  entication-2FA-for-webmail
• https://docs.cpanel.net/whm/security-center/two-factor-authentication-for-whm/