Two-step authentication
By default, a user enters only his username and password to log in to the control panel. For better protection of your account, enable the two-step authentication. When this option is activated, a user needs to enter:
- The login and password.
- A one-time digit password generated by TOTP-authentication apps such as Google Authenticator, Microsoft Authenticator, Duo Mobile etc.
This article describes the setup of two-factor authentication with Google Authenticator.
How to enable 2FA
- Log into Play Market or App Store and download and install Google Authenticator. The application can be installed on Android 2.1. and later, and the latest version of iPhone and iPad. The application does not require an active Internet connection or cellular connection.
- In the control panel in the upper right corner, click on the user, navigate to Settings → Enable two-step authentication. You will see a new form with a QR-code, the Account name and Key.
- Run Google Authenticator on your cell phone.
- Click on Start → Skip → Scan QR-code.
- Scan the QR code that appears. You will see a six-digit code.
- If the application cannot read the code:
- Click on Enter the key.
- Enter the Account name and the Key specified in the control panel. You will see a six-digit code.
- Enter the password in the One-time password field in the control panel.
- Click on Ok.
Make sure that your server time and mobile device (with Google Authenticator installed) time are synchronized.
If you have issues with 2-step authentication, or QR-code cannot be used, complete the following steps:
- Check your server time and date.
- Check Google Authenticator settings:
- Go to Settings menu → Correct time for QR-codes → Synchronize. You will see a confirmation message. Now you can use temporary codes to set up 2-step authentication. Synchronization may influence only an internal name of Google Authenticator and is not shown in device data and time settings.
- If in Google Authenticator you cannot find Settings, check time synchronization in your mobile device.
Disabling 2FA
- In the control panel in the upper right corner, click on the user, navigate to Settings.
- Click Disable two-step authentication and enter the 6-digit code generated in Google Authenticator.
Authorization with 2FA enabled
- Enter your Login and Password.
- Click on Log in.
- Run Google Authenticator on your cell phone
- Enter the One-time password from the application.
- Click on Ok.