Two-factor authentication (2FA), also called two-step authentication, increases the security of a user profile. The profile is linked to a mobile phone via Google Authenticator or another compatible application. If the phone is changed, authentication codes are linked to the Google account and will transfer automatically and if using a new account, the codes can be exported from the Authenticator application.
When signing in to a Phrase profile, users must provide a username, password, and security code generated on their mobile phone.
Enforce 2FA for the Organization
Organization owners and admins can enforce 2FA for the whole organization. Members can set up 2FA in their user profile at any time. When enforcement is enabled, members who have not set it up must do so before the grace period ends.
To enforce 2FA for all users, follow these steps:
-
From the Dashboard, select Organization settings and go to the Two-factor authentication tab.
-
Toggle on Enable 2FA requirement.
-
From the dropdown menu, select the period during which organization members must set up 2FA. The grace period can be set to 1, 7, 14, 30, 60, or 90 days.
The displays how many members do not currently have 2FA enabled.
-
Click Save settings to confirm changes.
Set up 2FA in the User Profile
To set up two-factor authentication in the user profile, follow these steps:
-
Install the Google Authenticator application on a phone.
-
From the , select Settings/Profile from the profile icon at the top right of the screen.
The page is displayed.
-
Click Security and scroll down to the section.
-
Click Generate QR code and scan the presented QR code with a phone.
The application displays a six-digit code.
-
Enter the code in the field.
-
Click Enable two-factor authentication.
The profile is linked to the application on the phone.
In case of issues with the authenticator application, refer to its documentation for troubleshooting (for example, the Google Authenticator help center).