Using Two-Factor Authentication to login to Vultr Control Panel

Updated on February 8, 2022
Using Two-Factor Authentication to login to Vultr Control Panel header image

Introduction

Two Factor Authentication, or 2FA, is a technique that adds a layer of security by requiring an additional authentication step to log in. For strong security, Vultr recommends:

  • Use a strong password. We have a free strong password generator available for your use.
  • Do not share your login information with any third party individual.
  • Use Two Factor Authentication for all users.

Vultr supports Two-Factor Authentication (2FA) using Google Authenticator and other compatible authenticator apps. Vultr also supports Yubikey and one-time-use emergency backup codes.

Usage Notes

  1. 2FA does not affect API Calls.
  2. 2FA does not change server login credentials.
  3. 2FA can be enabled on a per-user basis and does not affect the entire account.

Google Authenticator and Compatible Apps

Vultr supports 2FA with Google Authenticator and other Time-based One-time Password (TOTP) apps that support RFC 6238 such as:

The Vultr portal refers to time-based codes as Google Auth.

Enable 2FA via Google Auth

  1. Log into to your Vultr Account
  2. Click Account -> Authentication -> Manage Two Factor Auth, or follow this link.
  3. Choose Google Auth from the drop-down field.
  4. Enter a description of your choice, such as the name of your smartphone or device.
  5. Click the Add icon.
  6. The next page displays a QR code. Scan the QR code with the Google Authenticator app or the Chrome extension.
  7. Click Continue.
  8. The Google Authenticator app will generate a six-digit code. Enter that code on the next page.
  9. Log out of your Vultr account, and then log back in.
  10. You will be prompted to enter an authentication code. Use the generated six-digit token on your app.

Google Authenticator Requires Accurate Time on Your Device

Google Authenticator will generate incorrect codes if the time on your device is out of sync. Here are steps to sync the time.

Android

  1. Open the Google Authenticator app.
  2. Tap the More menu at the upper-right.
  3. Tap Settings
  4. Tap Time correction for codes
  5. Tap Sync now

More information at Google Support

iOS

  1. Go to Settings
  2. Tap General
  3. Tap Date & Time
  4. Enable Set Automatically

More information at Apple support.

2FA via Yubikey

To use Yubikey Authentication, you need any of Yubico’s Yubikey USB devices.

  1. Log into to your Vultr Account
  2. Click Account -> Authentication -> Manage Two Factor Auth, or follow this link.
  3. Choose Yubikey from the drop-down field.
  4. Enter a description for your Yubikey.
  5. Click Add.
  6. Make sure your Yubikey device is plugged into one of your USB Ports on your computer.
  7. Click in the text field to focus your cursor.
  8. Press the Y button on your Yubikey device, or touch the edge of the device if you’re using a Yubikey Nano.
  9. Click Update.
  10. On the next page, repeat the previous steps and click Update.
  11. Log out of your Vultr account, and then log back in.
  12. When prompted to enter an authentication code, insert the Yubikey device into a USB port.
  13. Press the Y button, or touch the edge of the device if using a Yubikey Nano.

How to Create Emergency Codes

After enabling two-factor authentication, you should create a list of one-time emergency codes in the Vultr Control Panel. These one-time emergency codes allow access to your account if you lose your two-factor authentication device.

  1. Log into your Vultr Account.
  2. Click Account -> Authentication -> Manage Two Factor Auth, or follow this link.
  3. Choose Backup Codes from the drop-down field.
  4. Enter a description of your choice, such as Emergency Codes
  5. Click the Add icon.
  6. Your codes are displayed. Record these codes in a secure place! They will not be displayed again.
  7. Check the I have copied these codes in a safe place box.
  8. Click Enable Emergency Codes.

How to Log In with Emergency Codes

To use your emergency codes:

  1. Enter your email and password at the account login page.
  2. At the Two-Factor Authentication prompt, enter one of your emergency codes.
  3. Cross that code off your list. Do not use it again, because each energency code may be used one time only.

Locked out

If you lose both your 2FA device and backup codes and can no longer log into your Vultr account, please contact support.