SiteGround has recently announced that it has introduced Two-factor authentication for the client management area to boost security for its users. The increased security is optional but highly recommended.
We all know that with the increasing nature of cyber attacks, account security is at the forefront of many people's minds. This is particularly true when a website can be the lifeblood of any business, and any compromise in security could mean thousands of dollars of lost income and or damage to the website. While you may think your password is safe, it is not always the case. Sophisticated hackers can use many techniques to access an account such as brute force, social engineering or hacking of other accounts you own (don't use the same username passwords everywhere!).
Two-Factor Authentication adds another layer of security to your account by adding a dynamically generated password which changes every few minutes. This will mean you will need a smartphone app so you can grab the new code each time you wish to log into your account. This significantly increases the security of your account, as it takes out of the equation many of the most common ways a hacker could get access to your account, and is widely considered the "go-to" method for increasing security on any account.
How to enable Two-Factor Authentication at SiteGround
To enable the Two-Factor Authentication at SiteGround go to "My Details" section under the "Login Details" option. Here you will have the option to enable the Two-Factor Login:
We won't go into full detail about the process of setting up Two-Factor Authentication, as SiteGround has produced their detailed tutorial here. However, in summary, the process is as follows:
- Download authenticator app to your phone — There are apps for Android, iPhone (Google Authenticator, Duo Mobile), Blackberry (Duo Mobile) and Windows Phone 7 (Authenticator) so almost all smartphones are catered for.
- Add SiteGround account — You will need to add your SiteGround account to your authenticator app. You can do this easily by scanning a QR code displayed on the SiteGround setup screen, or enter the "Secret" code.
- Confirm Activation — Once you have entered the activation code in step 2 above, you will see your first authentication code. You will need to enter this code on the SiteGround website in the next step, and press confirm. From now on, you will need to enter the code at each login to the SiteGround website. That is it ... everything is setup. The last couple of steps relates to a backup solution to access your account.
- Phone Backup system — If for some reason you lose access to your primary phone or authenticator app you can enter a different phone to gain access. Just enter your phone number, and wait to receive a code via SMS. Then enter this code to confirm the setup of the backup phone.
- Backup Code — The final way to access your SiteGround account if you do not have access to your phone or backup phone is to enter the backup code. The final screen in the setup process will provide this backup code, which you should write down and store in a safe place.
The guide does not say what will happen if you lose everything, and have no way of accessing your account. We suspect that SiteGround would still grant access should you speak to them, but we rather suspect you will be required to prove your identity or run through some other hoops, which might be inconvenient.