Skip to content
English
  • There are no suggestions because the search field is empty.

How does Two-Factor Authentication (2FA) work?

We offer platform administrators the option to add an extra layer of security using Two-Factor Authentication (2FA); here’s how it works.

Upon request, it is possible to enable Two-Factor Authentication (2FA) and add an extra layer of security to your platform. Contact your Partnership Manager if you'd like this feature to be enabled.

Once the feature is enabled, all users are required to set up Two-Factor Authentication (2FA) to continue using the platform. The login procedure will then include an extra step where they need to link their authentication app (such as Google Authenticator or Authy - all authenticator apps using QR code / TOTP (time-based one-time password) should be supported).

  • When an existing user logs in without having set up Two-Factor Authentication (2FA), they must first set it up before they can do anything else.
  • New users must set up Two-Factor Authentication (2FA) after verifying their email address.

User Prompt

Screenshot 2025-11-25 at 10.39.14

Setting up 2FA

Screenshot 2025-11-25 at 10.39.26

A new ‘Security’ tab will appear in each user’s account settings, where you can see the status, view backup codes, and disable Two-Factor Authentication (2FA) if you want to re-link your account.

Screenshot 2026-01-06 at 10.32.54

Before enabling 2FA

You can consider to notify users in advance, for example one week, before making two-factor authentication (2FA) mandatory. This gives users time to prepare. For example, major platforms such as GitHub communicated this change ahead of time and provided clear guidance to users.

You can also consider taking a more personal approach to communication and offering additional support, especially if your platform is used by less technically experiences users. This may include step-by-step instructions, reminders, or direct assistance to help users successfully enable 2FA.