Manage VirtFusion users, admin accounts and two-factor login

Every VirtFusion server belongs to a user, and every admin who manages the panel needs their own account. Managing VirtFusion users well keeps customers separated, makes support easier and limits damage if a password leaks.

Before you start

• Admin access to the VirtFusion admin area.
• If you use WHMCS, know that the module usually creates customer users automatically.

Create a VirtFusion user

1. In the admin area open Users and choose to add a user.
2. Enter name and email. The email is the login and is used to match WHMCS clients.
3. Set a password or send the user a set-password email.
4. Save. You can now assign servers to the user.

Customer access from WHMCS

With the VirtFusion WHMCS module, customers usually open their control panel from the WHMCS service page through single sign-on, so they never need a separate VirtFusion password. See WHMCS module setup.

Admin accounts

• Give every staff member a personal admin account; never share one login.
• Grant only the permissions each person needs if your version supports roles.
• Remove admin accounts the day someone leaves.

Turn on two-factor authentication

1. Log in with the account and open the account or security settings.
2. Enable two-factor authentication and scan the QR code with an authenticator app.
3. Enter the code to confirm and store the recovery codes safely.
4. Require 2FA for all admin accounts.

Suspend or delete users

• Suspending a user blocks panel login; their servers may keep running depending on the action you choose.
• Delete a user only after their servers are deleted or moved to another owner.

Troubleshooting

• User cannot log in: check the account is active, reset the password, and check the email address for typos.
• Lost 2FA device: use a recovery code, or have another admin reset 2FA.
• Server under the wrong user: change the server owner from the server's settings.

Frequently asked questions

Can one user own many servers?

Yes. All of a customer's servers appear together in their control panel.

Can a customer share access with a colleague?

This depends on your version's sub-user features; otherwise create access through WHMCS contacts.

Is 2FA required for customers?

It is optional for customers but strongly recommended, and should be mandatory for admins.

Next steps

• VirtFusion security hardening
• Create a server
• WHMCS admin roles and 2FA