Skip to main content

Monitoring User 2FA Setup Status in cPanel

Para Dx

Hi, we are using cPanel to manage users and their corresponding email accounts. Recently, we added 2FA for better protection of our users. However, we would like to know if there is any way we could monitor the users' 2FA setup status, which could help us better manage the accounts and send notices accordingly. We have checked the panel, but there is no similar function available. Therefore, we would like to ask if there are any features we may have overlooked or any workarounds to achieve this. Thanks!

Comments

9 comments

Date Votes
  • cPRex Jurassic Moderator

    Hey there!  The closest option I have at this time would be the following API call:

    https://api.docs.cpanel.net/openapi/whm/operation/twofactorauth_get_user_configs/

    which has some sample output on the page.  If you need anything more specific than that, we'd need a feature request submitted so we could look in to adding it to the product.

    1
  • Para Dx

    Hi, cPRex, thank you so much for providing these. We have submitted a feature request about the panel 2FA management which could help us a lot to see the user 2FA-enabled status and related details for better safety concerns and security obligations. We appreciate it again and hope to see if that could be approved and released later! Thanks!

    0
  • cPRex Jurassic Moderator

    I'll review that request either tomorrow or Thursday!

    1
  • Para Dx

    Thank you, cPRex! Apologies for any confusion in our previous requests. We’re specifically interested in managing and overseeing the 2FA information for our cPanel email users, not the cPanel user account 2FA information from the current API. Our goal is to try our best to enhance the security of our email users, for the part as shown in the personal 2FA settings of the image below. We appreciate your assistance a lot and look forward to your response!

    2
  • cPRex Jurassic Moderator

    I just wanted to let you know the request is in the queue to be looked at by our development team.  I'm not sure when or if I'll have another update, but stay tuned to our features site to see if it makes it to the Planned Roadmap page.

    1
  • Para Dx

    Thank you cPRex! I would like to follow up with this case. Currently, our company is under a serious spoof and email attack globally. So we just want to ensure that every user of our company has enabled their webmail 2FA.
    Is there any suggestion we could easily check the server or API with root permission to see whether their secret exists, so we could know who enabled it? Sorry to mention it again, but it's very urgent situation for us now. Thank you so much!

    0
  • cPRex Jurassic Moderator

    Para Dx - I'm looking into this now and I'll let you know what I find with that case!

    1
  • cPRex Jurassic Moderator

    I spoke with the team and at this point it's not currently planned.  BUT...they'd like me to add this to the features site to see if other users also want this added to WHM.  I'll need to get some graphics created for this, but I'll post once I've added this to the site so users can add their votes!

    1
  • Para Dx

    Appreciate your assistance and help, cPRex. Hope it would be in the coming feature soon!

    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post