1.2.2. 2-step authentication (2FA)

Two-factor authentication (Two-Factor Authentication or 2FA for short) is an additional security measure after inclusions which at entrance it will be necessary not only to enter into the control panel account mail and password, but additionally:

  • Or confirm the entry using our Telegram bot.
  • Or enter a special one-time code generated by an authenticator application installed on the mobile device.
  • Or, if the account added phone number, request a call and use the last 4 digits of the number from which the call will come as a code. If the call does not arrive, after several repeated calls, the system will send an SMS with a code instead of a new call. This feature is available as a fallback to the previous two and cannot be enabled separately from them.

2-Step Verification is managed in the section "Personal data " in the tab "Security".

Warning!

Enabling 2-Step Verification will reset all active sessionsexcept for the current one.
Telegram 2-Step Verification is automatically enabled when linking a Telegram account and if you wish, it can be disabled.
  1. Make sure your account has added Telegram account.
  2. Open the section "Personal data " and switch to tab "Security".
  3. In the block "2-step authentication" near the method Telegram click "Launch":

Warning!

For two-step authentication to work correctly through the authenticator app, the time set on the mobile device must exactly match the current server time. If it does not match, you need to go to the section in the application "More → Settings → Time correction for codes" and press "Synchronize".
  1. Open the section "Personal data " and switch to tab "Security".
  2. In the block "2-step authentication" near the method Google Authenticator click "Launch":
  3. Install the authenticator application on your mobile device:
  4. In the app, scan the QR code or manually enter the secret key below it:
  5. Enter the two-step verification code generated by the app and click "Confirm":
Two-step authentication via mail is disabled in the same way.
  1. Open the section "Personal data " and switch to tab "Security".
  2. In the block "2-step authentication" next to the method you want to disable, click "Disable":

Warning!

For security reasons, we recommend that you configure 2-Step Verification on only one device, which is completely under your control and inaccessible to unauthorized persons. Remember that you are solely responsible for all actions that may be performed on your account by persons who have access to it.

At entrance it is possible to use several different devices to the account to pass two-step authentication. This can be organized in the following ways:

  • By linking several to one account at once Telegramaccounts... Upon entering, our Telegram bot sends a confirmation to each of them.
  • Byadding several phone numbers. At the entrance, you can choose which of them to request a call.
  • Configuring the authenticator app on multiple devices at once:
    If the already configured application supports import / export, export the data and import it on another device. This opportunity is available in Google Authenticator and alternative applications like Aegis and andOTP... With its help, you can transfer settings between devices and create a backup copy to save them in a safe place in case of unforeseen situations.
    Scan a QR code with multiple devices - for this you need disable 2-Step Verification through the app (if enabled), and turnon again. At the same time, at the stage of scanning the QR code, you need to:
    • Either scan the QR code or enter the secret key not on one, but on all required devices at once.
    • Either take a screenshot with the QR code or copy the secret key to use later to configure the app on another device. When using this method, it is extremely important that no outsiders have access to the screenshot or key. It is better to securely delete them immediately after setting up the necessary devices or store them where it is guaranteed that no one but you will have access to them.
Content