Enable Two-Factor Authentication on MyNobull

Two-factor authentication (2FA) adds a second check to your MyNobull login: something you know (your password) plus something you have (a rotating six-digit code from an authenticator app). If your password ever leaks, the account stays closed without the code. It takes about three minutes to set up and it is the single most effective thing you can do to protect your services, invoices, and payment details.

Before you start#

• Install an authenticator app on your phone, or use the TOTP feature of a password manager. Google Authenticator, Microsoft Authenticator, Authy, 1Password, and Bitwarden all work. Download only from the official app store listing published by that vendor.
• Have somewhere safe to keep a backup code. A password manager is ideal.
• Log in to my.nobullnetworks.com.

Enable two-factor authentication#

1. Open Security Settings. Click your name in the top right of MyNobull, then choose Security Settings. (You can also get there from Change Password and then the Security Settings tab.)
2. Click "Click here to Enable". A setup window opens. Choose the time-based authenticator option and click Get Started.
3. Scan the QR code from inside your authenticator app. Add a new entry (usually a plus sign), pick Scan QR code, and point the camera at the code on screen. Use the app's own scanner rather than your phone's camera app. If scanning fails, choose Enter setup key and type the key shown under the QR code.
4. Enter the six-digit code. Your app now shows a code that changes every 30 seconds. Type the current one into the Enter authentication code field and click Submit. If it is rejected, wait for the next code and try again; the phone's clock being a minute off is the usual cause.
5. Save your backup code. MyNobull shows a one-time backup code. Copy it into your password manager or write it down and store it somewhere safe, then click Close. This code is your way back in if you lose the phone.
6. Test it. Log out, log back in with your email and password, and confirm you are prompted for the authenticator code. From now on every login asks for it.

Disable two-factor authentication#

Go back to Security Settings from the account menu and click the disable button. MyNobull asks for your account password to confirm it is really you; enter it and click Disable Two-Factor Authentication. Log out and back in to confirm the code prompt is gone.

Lost or replaced your phone?#

If you still have the backup code, use it in place of the authenticator code at login, then go straight to Security Settings, disable 2FA, and enable it again with the new device so a fresh backup code is issued.

If you have neither the phone nor the backup code, open a support ticket from the email address on the account. We will need to verify that you own the account before removing 2FA, so expect a few identity questions. That friction is deliberate: it is what stops someone else from doing the same thing to you.

Where else to use 2FA#

MyNobull protects your billing and services. Your servers deserve the same treatment: SSH keys on Linux servers, and 2FA on the game panel and any control panel you install. Sub-user access on the game panel means friends never need your MyNobull credentials at all; see Sub-Users, Allocations, and Ports.