Use your own trusted device and an authenticator supported by the installed extension. Confirm access to the account recovery email and the provider recovery process. Keep an existing verified session open until a fresh login has succeeded.

1. Open your profile or the installed Multi-Factor Authentication controls for your account. Confirm you are configuring the intended Plesk user.
2. Start enrollment and add the displayed secret to your authenticator using the QR code or manual setup value. Treat that secret as a credential and do not share screenshots of it.
3. Enter a current generated code to confirm enrollment. Ensure your device time is synchronized if the extension uses time-based one-time codes.
4. Save any recovery codes or recovery information offered by the installed version in secure storage separate from the device. Do not assume every extension provides the same recovery method.
5. Test a new login in a private browser window, complete both steps and confirm the expected account opens before ending the original session.

Confirm the second factor is requested for the relevant login workflow and that you understand how to recover a lost device. Review additional users individually; enabling MFA on the owner account does not automatically protect every separate account or API credential.

If codes fail, check time synchronization, the selected authenticator entry and whether enrollment was completed. Avoid repeated guesses that may trigger a block. If the device is lost, use the documented recovery process through an authorized administrator or support. Do not disable unrelated server security or reinstall Plesk to regain one account.

• Creating a limited additional Plesk user
• Resetting a forgotten Plesk password
• Investigating a blocked IP in Plesk Fail2Ban
• Protecting a staging directory with a password in Plesk

• Plesk: Setting Up Multifactor Authentication In Plesk
• Plesk: Deprecation Plan