
(taking a little bit of liberty with definitions, I know…) “what you are”, “what you have” or “what you know”.ġP on my iPhone is my “what I have” and the password to 1P is 1 part of “what I know”, the other part being the password in 1Password to the site of app. I would define 2FA as having two items from this list: It satisfies my 2FA (or multi factor) needs because there’s a separate password to access the app, and I can get at the web interface in case my phone is lost. If that one gets stolen having spread stuff around apps does not make you much safer.
Try the manual configuration (secret key) option instead of the QR code.I understand your thinking, and to a certain extent could agree.īut if the app is one the same device (usually phone) there’s no real security win.
Check that the phone’s time is synced with internet time.If there are any problems performing these instructions: Note that the code generated earlier will be invalidated. You can regenerate this code at any time.
Store your recovery code in a safe place, such as an encrypted notes app.
In the Verify MFA Code box, enter the MFA code from the authenticator application to verify the pairing and then click Enable.Īfter you set up your MFA, you are returned to the Edit Profile screen where you can generate a recovery code. Open the authenticator application you installed above and scan the QR code that is displayed in the Enable MFA dialog box.Īlternatively, you can use the manual configuration option by clicking on Show secret key for manual configuration and then entering the secret key in the authenticator application. Click on your name in the top-right corner of any screen and then select My Settings from the drop-down menu. Your phone’s time MUST be synced with internet time, or you may get a login error. Go to the app store for your device, search for “QR code scanner,” choose one, and install it. If the authenticator app cannot locate a QR code scanner app on your mobile device, you might be prompted to download and install one. Google | Authy | Duo | AuthAnvil | 1Password | Lastpass | Salesforce | Microsoft | Sophos | IBM
Google | Authy | Duo | AuthAnvil | 1Password | Lastpass | Salesforce | Microsoft | Sophos
Most OTP-compliant (one-time password) applications can be used as the second factor for MFA logins to IT Glue, including:
You'll need an authenticator application on your mobile phone. The code generated may be referred to as a one-time password (OTP). This is also sometimes known as two-factor authentication or 2FA. With MFA, you are prompted for your user name and password plus an authentication code generated by an authenticator application. Traditional authentication schemes require only a user name and password. In this article, you'll learn how to set up multi-factor authentication (MFA), which provides higher security for your user account.