Securing MyHost accounts with compulsory 2FA

Phishing attacks have targeted MyHost users more in 2026 than ever before. We’ve seen five widespread attempts to steal passwords from MyHost customers since January, as well as an industry-wide warning from the Domain Name Commission about scam emails.

To fight back against this, we’re adding an extra layer of account security by making two-factor authentication (2FA) compulsory for all MyHost accounts. With 2FA, stolen passwords aren’t enough to break in and change your details.

In the coming days, MyHost accounts without 2FA already enabled will be required to set up 2FA. The first time you login after this change, you’ll be prompted to enable 2FA through one of two methods:

1. App-based: Get codes through an authenticator app like Google Authenticator.
2. Email verification: Get one time passwords sent to the email you use to log in to MyHost.

It’s worth making sure you have access to the email address stored in your MyHost account details before we enforce 2FA. If you can’t access that email address when 2FA is made compulsory, you won't be able to use the email verification option (you’ll still be able to use the app-based option).

• To update your login email address, go to Your Profile in the MyHost Client Area.
• Change Email Address to the email you wish to receive verification codes.

To get ahead of the coming change, you can enable 2FA right now within the Security Settings in the MyHost Client Area.

Email or app?

If you’re setting up 2FA before we make the change compulsory, you’ll have the choice between receiving codes via email verification or through an app like Google Authenticator.

We recommend the more secure, app-based option. Email 2FA is less secure because a compromised email inbox is enough to reset passwords and receive 2FA codes.

It’s worth noting that with app-based 2FA you’ll be entering your authentication code each time you login. With email verification, you’ll only have to enter your code once per day.

You’ll have the choice to change between methods at any point.

Once you’ve got 2FA set up on MyHost, we still encourage you to use a strong password for your email inbox and to protect it with 2FA as well.

What do I need to do?

If your account isn’t already protected by 2FA, you have the option to take control and switch it on for yourself now. Otherwise, you’ll be prompted to set it up when you log in later this month.

If you have any questions about how the 2FA changes will work or affect you, please get in touch.