How to Enable Two-Factor Authentication (2FA)
Two-Factor Authentication (2FA) is a more secure login method. In addition to entering a password, it requires a one-time password (OTP) to verify your identity in two steps, enhancing account security and mitigating data security risks caused by password leaks.
Administrator Preparation
To reliably use Two-Factor Authentication, administrators should complete the following checks and configurations:
1. Verify System Time Accuracy
Check and correct the system time. If the time on your phone and the system are not synchronized, time-based one-time passwords will fail verification. To keep the system time accurate, it is recommended to set the system time to automatic synchronization.
2. Enable Email Notification Service
Authorize the system to send emails, so it can send Password Reset and 2FA Emergency Verification Code emails to the user's configured Security Email. The system supports Gmail, Outlook, and custom SMTP servers. For details, see How to Enable Email Notification Service.
3. Enable Mandatory Two-Factor Authentication
Identify the scope of users who need enhanced account security and enable mandatory Two-Factor Authentication for them. You can set the scope to Administrator Users, All Users, or Specific Users and User Groups.
User Setup Process
1. Enable Two-Factor Authentication
Go to the Personal Settings page, where you will see the Two-Factor Authentication settings.
Click Enable Now, and follow the prompts to scan the QR code using an Authenticator App that supports the TOTP protocol (Time-based One-Time Password), such as "Microsoft Authenticator". After scanning, enter the one-time password displayed in the Authenticator App in STEP 2 to complete the setup.
2. Login Process After Setup
After completing the username and password verification on the login screen, you will need to enter the one-time password displayed in the Authenticator App. Login will succeed only after the verification passes.
3. Manage Trusted Devices
If you check Trust This Device on the one-time password screen before completing login, the current device will be exempt from the second-step OTP verification for subsequent logins. Trusted devices can be viewed and managed in the Two-Factor Authentication settings on the Personal Settings page.
4. Set Up Security Email
To avoid the risk of being locked out of your account due to accidental loss of your phone or key, it is strongly recommended to set up a Security Email.
After setup, click Unable to Access on the second-step verification screen. The system will send a one-time Emergency Verification Code to your configured Security Email. Check your email and enter the Emergency Verification Code to complete login.
Authenticator App Guide
Any Authenticator App that supports the TOTP protocol (Time-based One-Time Password) can be used. It is recommended to scan the QR code from the Web interface.
Since most authenticator apps do not support scanning QR codes from the photo library, when using the Fygo App, follow the steps below:
Microsoft Authenticator
Manually paste the Account and Secret Key to add the entry:
