Two-factor authentication (2FA), also called two-step authentication, increases the security of a user profile. The profile is linked to a mobile phone via Google Authenticator or another compatible application. If the phone is changed, authentication codes are linked to the Google account and will transfer automatically and if using a new account, the codes can be exported from the Authenticator application.
When signing in to a Phrase profile, users must provide a username, password, and security code generated on their mobile phone.
Enforce 2FA for the Organization
Organization owners and admins can enforce 2FA for the whole organization. Members can set up 2FA in their user profile at any time. When enforcement is enabled, members who have not set it up must do so before the grace period ends.
The grace period starts when the 2FA requirement is turned on and applies to the whole organization. Turning on the 2FA requirement does not send an email to organization members. Members should be notified before the requirement is enabled, so they can set up 2FA within the grace period. After the grace period ends, a member who has not set up 2FA can still sign in with a password but cannot use the organization until 2FA is set up. The member sees a screen that offers to set up 2FA or log out. If the member belongs to another organization, they are taken to that organization instead.
To enforce 2FA for all users, follow these steps:
-
From the Dashboard, select Organization settings and go to the Two-factor authentication tab.
-
Toggle on Enable 2FA requirement.
-
From the dropdown menu, select the period during which organization members must set up 2FA. The grace period can be set to 1, 7, 14, 30, 60, or 90 days.
The displays how many members do not currently have 2FA enabled.
-
Click Save settings to confirm changes.
Set up 2FA in the User Profile
To set up two-factor authentication in the user profile, follow these steps:
-
Install the Google Authenticator application on a phone.
-
From the , select Settings/Profile from the profile icon at the top right of the screen.
The page is displayed.
-
Click Security and scroll down to the section.
-
Click Generate QR code and scan the presented QR code with a phone.
The application displays a six-digit code.
-
Enter the code in the field.
-
Click Enable two-factor authentication.
The profile is linked to the application on the phone.
In case of issues with the authenticator application, refer to its documentation for troubleshooting (for example, the Google Authenticator help center).