Hosting Terms
What is Two-Factor Authentication?
What Two-Factor Authentication really means, with the jargon taken out — plus the example that makes it obvious.
Straight answer first
2FA asks for a second proof on top of the password — usually a code from an app — so a stolen password on its own no longer gets anyone in.
Below: the fuller explanation, a picture that makes it stick, why it matters in practice, and where you will actually run into it.
Written by the Hosting Seller staff · Checked 1 August 2026
0
Terms left unexplained
100+
Definitions, cross-linked
Real
Examples from real kit
Free
To read, naturally
Codes generated by an app beat codes sent by SMS, because a phone number can be ported away from you. Hardware keys beat both wherever they are supported. The recovery codes you are shown during setup are the answer to the lost-phone problem, and they are worth saving properly at the time.
Turn it on in order of power. The hosting panel, the client area, your email and your domain registrar come first, because each of those can reset or redirect everything that sits below it.
The picture that makes Two-Factor Authentication stick
A second lock that only opens for something you carry. The burglar with a copied front-door key still stands outside, because the deadbolt does not answer to copies.
Comparisons simplify, naturally — but this one holds together well enough to reason with, and reasoning is the whole point of a glossary.
What is actually at stake
Leaked credentials are simply the weather now, arriving continuously in the background. 2FA turns every guessed or leaked password from an incident into a non-event, at a cost of one extra tap when you sign in.
That is the test for any technical term, incidentally — not 'do I understand it fully' but 'do I know when it is the answer to my problem'. For this one, you now do.
Two-Factor Authentication out in the open
A password reused years ago surfaces in a breach dump and gets tried against the hosting panel within hours. The attempt dies at the code prompt, and the whole affair is one line in a log.
Perfectly ordinary once you have seen it, which is rather the point: most hosting concepts are simple machinery wearing an intimidating name.
How this turns up in your own account
You will meet it in the control panel and occasionally in a support conversation, usually already set the right way. If this term made sense, the natural next reads are Brute-Force Attack, Phishing, SSH and Encryption.
Mailboxes on your own domain are part of the plan, never an add-on sold back to you at checkout.
A glossary written by the people on the counter
We treat unexplained jargon as a service failure. This glossary is the support desk's accumulated translations, published where a search engine can hand them out for us.
Order an annual plan and the first year of your domain registration is on the house.
- 100+ terms, all in plain English
- Everyday comparisons and real examples
- Related concepts linked together
- Written by the people on the desk
Why Hosting Seller
On every plan, as standard
Grounded in real kit
Examples point at hosting you would actually use, not at an abstract diagram.
One term, fully landed
Two-Factor Authentication defined, pictured by comparison and placed in your own control panel — recognise-level in a single read.
The next reads, mapped
Read on into Brute-Force Attack and Phishing — terms rarely stand alone, so the neighbours are linked.
Pictures that stick
Each concept gets a comparison you will still remember at the moment you actually need it.
The stakes spelled out
Not only what it is, but when it turns out to be the answer to a problem you are having.
Plain English first
Every term defined for people who run sites, not for other sysadmins — jargon translated rather than restated.
First Steps
From choosing to live
- 1
Find it in your own account
The quickest way to learn a hosting term is to find it in your own panel; five minutes of looking beats an hour of reading about it.
- 2
Check what the defaults are
Our platform ships sensible defaults for this — check rather than assume, and you will know your setup instead of hoping about it.
- 3
Follow the terms next door
Concepts travel in packs — Brute-Force Attack, Phishing and SSH finish this one's picture, and each is a two-minute read away.
In the Box
Packed with every plan
- One-click installs for WordPress and 400+ other applications
- NVMe SSD storage on every shelf, not just the top one
- DDoS filtering handled out at the network edge
- Webmail in the browser plus IMAP, POP and SMTP for your own client
- Real people on the counter, every hour of every day
- Site migration done for you by our staff, at no charge
- Mailboxes that carry your own domain name
- Upgrades apply to the account in place, with no move between plans
- cPanel, the panel the rest of the trade already knows
- Spam and virus filtering fitted to every mailbox
Across the Counter
The questions we get asked most
Is an authenticator app really better than SMS?
Meaningfully, yes. SIM-swap attacks exist and they intercept text messages, whereas an app code is generated on the device and never crosses a network. SMS still beats nothing at all, but app codes or a hardware key are what counts as current practice.
What if I lose the phone with my codes on it?
Recovery codes, saved at setup and kept in your password manager, put you straight back in. Identity verification through support is the slower fallback. Saving those codes when you first turn 2FA on is the entire insurance policy, and it takes about a minute.
Which control panel comes with the account?
cPanel, which the whole trade already knows. That means every tutorial online matches what you see, your backups restore onto any cPanel host anywhere, and what you learn here stays useful for life. Plesk and DirectAdmin are stocked on specific plans for anyone who prefers them.
What uptime do you commit to, and who is watching?
We commit to 99.9% uptime and watch it continuously. That figure is an operational target rather than a poster line, and the alerting behind it usually has an engineer on a problem before the first customer notices anything is wrong.
Can I set the PHP version myself?
Yes — PHP versions are chosen per site from the control panel, so an old application and a current one can sit side by side on the same account. Extensions and per-site settings live in the same screen, and none of it needs a support ticket.
Can I bring a domain I already own?
Yes, and transfers in are routine. Unlock the name at your present registrar, collect the auth code, then start the transfer from your client area. Whatever registration time is left comes across with it, and DNS keeps answering the whole way through.
Does hosting come with mailboxes?
It does — mailboxes on your own domain ship with every hosting plan, with webmail, IMAP, POP and SMTP access and spam filtering fitted as standard. There is also standalone email hosting for domains whose website lives somewhere else entirely.
Read next
Brute-Force Attack
A brute-force attack tries credentials over and over — passwords guessed by the thousand, or leaked pairs r…
SSH (Secure Shell)
SSH is the encrypted protocol that lets you drive a server from a text prompt — running commands, moving fi…
Web Hosting
cPanel hosting on NVMe disks, with SSL, migration and year-one domain included.
Mail Filtering
Spam and virus filtering in front of any mailbox, wherever it is hosted.
Packing up and moving host? Take our checklist.
A plain running order for a move nobody notices: what to copy first, how to carry email across without dropping a single message, when to point DNS, and the two slips behind nearly every hour of downtime we get called about.
Your site is worth better hosting.
Quick NVMe hosting, SSL and the move in included, and real people on the counter at any hour — on a price that doesn't shift.
See the plans