Two-factor authentication (2FA)

Two-factor authentication (2FA) is a security measure that requires two forms of verification to access an account:

1. the user’s password;
2. a code sent by SMS or generated by an authenticator app.

As an admin, you can make 2FA required for the admins of your workspace, or for all its users.

Require 2FA

1. Open the 2FA settings.

   Go to “Settings” > “Configuration” and click the “Two-factor authentication (2FA)” card.

2. Choose who must use 2FA.

   Select one of the options:

   • “Require for Administrators only”
   • “Require for all members”
   • “Don’t require”

   Two-factor authentication (2FA)

   Make 2FA authentication required by default for every people of the workspace:

   Require for Administrators onlyRequire for all membersDon’t require

3. Confirm.

   In the “Require 2FA on login?” window, click “Confirm”.

The users concerned are asked to set up 2FA the next time they open RandomCoffee. If the option applies to you, you are asked right away.

What users see

The next time they open RandomCoffee, the users concerned see a page that asks them to set up two-factor authentication. They choose a second verification method: “Use an authenticator app” or “Use SMS”, and click “Enable”.

Setup Two-Factor Setup

Your administrator at Acme has improved security login with two-factor authentication (2FA). Yo need to choose a second verification method to login to your account:

Use an authenticator appEnable

OR

Use SMSEnable

• With an authenticator app (for example, Google Authenticator): they scan the QR code shown on screen, or enter the code manually, in their app. They save the backup code somewhere safe: it gives access to their account if they lose their device. Then they enter the six-digit code from the app and click “Verify”.

  Configure authentication app

  1. Download a two-factor authenticator app on your mobile device.

  2. Open the app, then scan QR code below or manually enter this code: K7QW3NRX5ZJT2MHB6LCV4PYE7DGA3SUF

  3. Important: Save the backup code M4TZ6XQB2WRN7KJC3HEP5VYL6AGD2FSU somewhere safe. You can use it to access your account if you lose your device.

  4. Enter the current six-digit numerical passcode from the two-factor authenticator app to complete the setup process.

  CancelVerify

• With SMS: they enter their country code and phone number, then the six-digit code they receive by SMS.

From then on, each time they log in, they enter their password, then confirm with their chosen method.

Stop requiring 2FA

In the same card, select “Don’t require”, then confirm. Users can then log in without a second verification method.