Two-factor authentication (2FA) is a method of adding additional security to your account. The first "factor" is your usual password that is standard for any account. The second "factor" is a verification code retrieved from an app on a mobile device or computer.
Enabling two-factor authentication
You can enable two-factor authentication for your account by following these steps:
- Select the “Config” option in the sidebar.
- Click on the “My Configuration” link in the sidebar.
- Select the “Account login & security” option.
- Scroll down to the “Two-factor authentication” section.
- Click the “Set up” button to start the set up process.
Upon clicking “Set up”, the following dialog will be presented:
- Install an authenticator app on your mobile device. Some options include:
- Google Authenticator
- iOS: download from the App Store
- Android: download from the Google Play Store
- Microsoft Authenticator
- iOS: download from the App Store
- Android: download from the Google Play Store
- Apple Passwords (iOS): https://support.apple.com/en-au/guide/iphone/ipha6173c19f/ios
- Google Authenticator
- Using the authenticator app, scan the QR code presented.
- If you cannot scan the QR code, you can provide the secret key instead. You can find that by clicking the “Can't scan your QR code?" prompt.
- Your authenticator app should now be generating 6 digit codes. Type the 6-digit code from your app into the input.
- Click “Next”.
Afterwards, you will be presented with your recovery codes. Your recovery codes can be used to recover access to your account if your two factor authentication device is lost. These codes are one-time use, and the code will become invalid upon being used.
Store these in a safe place, as if you are unable to provide a valid authenticator code or recovery code, you will be locked out of your account and will have to contact us.
Logging in
When you log in, after entering your password, you'll be asked for an authentication code.
- Open your 2FA app and you should see a 6-digit authentication code.
- Type the authentication code in as is (with no spaces), and then click the “Login” button.
- Because the authentication code is time-based, it may change while you're doing this, in which case you'll have to add the latest code instead. The application will normally indicate when a code is about to expire (e.g. in Google Authenticator, the code's colour changes from blue to red).
If you need to use a recovery code, enter it in place of the authentication code. Recovery codes are case-sensitive and need to be entered in all caps, including the dash between the characters (e.g. 78R5T-93JVP)
Regenerating recovery codes
You can regenerate your recovery codes at any time, should you have misplaced or lost them.
- Select the “Config” option in the sidebar.
- Click on the “My Configuration” link in the sidebar.
- Select the “Account login & security” option.
- Scroll down to the “Two-factor authentication” section.
- Click the “Regenerate recovery codes” button.
You will be prompted for your account password to confirm your identity beforehand. Any previously saved recovery codes will no longer be valid once you generate new codes.
You will then be presented with the recovery codes in the same manner as the setup procedure above.
Disabling two-factor authentication
You can disable two-factor authentication for your account by following these steps:
- Select the “Config” option in the sidebar.
- Click on the “My Configuration” link in the sidebar.
- Select the “Account login & security” option.
- Scroll down to the “Two-factor authentication” section.
- Click the “Disable two-factor authentication” button.
You will be prompted for your account password to confirm your identity beforehand.
Single Sign-On (SSO)