(09-04-2014, 10:00 PM)Me.B Wrote: Another solution would be to lock access only for one IP you have on another server.
Then setup on this server OPEN VPN or such VPN services ( you can use a cheap VPS ). Any customer need to login to VPN so he can access control panel.
That would offer 2 security layers BUT it's not 2 factor authentification like with phones. Easier to implement and may work with many services and stop bots.
M B
I got to add another hacked client to my list this past Thursday. Cpanel password compromised and then used to send spam. Needless to say I reset all passwords for everyone.