Configure Security Policies

This interface provides the configuration settings of the Security Policy that apply to cPanel, cPanel webmail, and WHM on your server.

Security Policy Items

Limit logins to verified IP addresses.
Two-Factor Authentication: Google Authenticator
Password Strength

The actual required password strength is set at Password Strength Configuration.
Password Age
Maximum Password Age (in days):

Security Policy Extensions

In addition to cPanel, cPanel webmail, and WHM interfaces, enable Security Policies for the following request types:

API requests
DNS Cluster Requests

Two-Factor Authentication is enforced for session-based API requests regardless of this setting. Disabling the API requests option only exempts API requests that use HTTP Basic authentication from Security Policies. We recommend you keep the API requests option enabled.

You may need to reset your password or provide other information immediately after you click Save.