Two-step Verification

Introduction

2-step verification is a simple and more secure way to protect your accounts. It combines a password (something that you know) with a second factor (something that you own), so it is less vulnerable to attacks.

The most common verification techniques are:

  • Text messages with PIN code on your mobile phone
  • Authenticator app generates an authentication code
  • Yubikey (a hardware device similar to USB)

Exponea currently offers 2-step verification with the Authenticator app and Text message. We plan to support Yubikey soon.

Configuration

To enable 2-step verification for your Exponea accounts, go to Settings > User Settings > Security.

Configuration window

Once the 2-step verification is enabled, you will be asked to verify yourself with the chosen method every time you log in. Also, you will be asked to provide a new token/code from the authenticator app after 30 days or every time your IP is changed.

Login page - 2-step verification

Authenticator app

Install an authenticator app on your mobile device. You can use any authenticator mobile app, but we recommend to install Google authenticator:

Open authenticator and scan the QR code to obtain a 6 digit code which you need to input in Exponea. Click "confirm".

Configuration of Authenticator APP

Backup codes

Backup codes are useful if you don't have access to your mobile or Yubikey. When you enable this option, you will obtain 10 codes which you can use to log in. You can use every code only once.

๐Ÿ“˜

Note that backup codes are not part of 2-step verification. Use backup codes only as a recovery option if you lose access to your devices.

Text message

In User settings -> Security enable the "Text message" option. When you enable this option you need to enter your phone number and click Get code. Once you receive the code type it into the text area below. Click confirm.

๐Ÿ“˜

You can add more phone numbers for this verification method. Just click show when text message verification is enabled.

Updated about a month ago


Two-step Verification


Suggested Edits are limited on API Reference Pages

You can only suggest edits to Markdown body content, but not to the API spec.


We rely on cookies

to optimize our communication and to enhance your customer experience. By clicking on the Accept and Close button, you agree to the collection of cookies. You can also adjust your preferences by clicking on Manage Preferences. For more information please see our Privacy policy.

Manage cookies
Accept & close

Cookies preferences

Accept & close
Back