How to Set Up 2FA Print

Cockpit includes a built-in Two-Factor Authentication option in the Settings page so you can add an extra login step beyond just a username and password.

When to Use This

• You want to secure an owner or admin account with an extra verification step.
• You are hardening a fresh panel before regular use.
• You want to replace password-only login with something stronger.
• You need a simple setup guide for another operator.

Where 2FA Lives

Open Settings and go to the Security Settings area. Cockpit shows a dedicated Two-Factor Authentication (2FA) section with either a Setup 2FA button or a Disable 2FA button depending on the current state.

Steps

1. Log in to Cockpit.
2. Open Settings from the sidebar.
3. Find the Security Settings section.
4. Click Setup 2FA.
5. Follow the setup prompt shown by the panel and pair it with your authenticator app.
6. Save or confirm the setup so the panel marks 2FA as enabled.
7. Test your next login carefully to make sure the code prompt appears and works.

Expected Result

Once 2FA is enabled, Cockpit should show it as active in Security Settings and your next successful password login should also require the second verification step.

Before You Enable It

• Make sure the account owner understands they will need access to their authenticator app for future logins.
• Do not enable 2FA casually on an account you cannot recover easily.
• If multiple people share one account, fix that first instead of sharing a single 2FA device.

Common Mistakes

• Enabling it without testing: Always confirm the next login works before calling the setup finished.
• Using a shared device: Owner accounts should not depend on a device everyone uses informally.
• Forgetting what changed: After enabling 2FA, login flow changes by design, so the extra code prompt is expected.

Example Use Cases

• Fresh owner setup: After installing Cockpit, the owner enables 2FA before doing any real maintenance work.
• Panel hardening: A reseller adds 2FA to the primary operator account before handing the panel to staff.
• Security refresh: After changing a password, the admin also enables 2FA to reduce risk from old credentials.

Related Articles

• Settings Page Tour
• How to Change Account Details
• First Login After Installing Cockpit