Set Up Two-Factor Authentication on an Account

This article will walk you through how to set up Two-Factor Authentication for an account. When you enable Two-Factor Authentication with the new sign-in, you will have to use your password and a verification code (from an authenticator app) to successfully log in.

Important Notes

• Two-factor authentication has changed from email to authenticator apps in the new sign-in.

• CivicPlus recommends that every user enables Two-Factor Authentication to provide enhanced security. This industry-standard security convention requires users to use both their password and a secondary form (Authenticator app) to prove their identity at sign-on, hence the term two-factor.

• To remove two-factor authentication from an individual account, the user will need to contact Support.

Instructions

1. Log into the system

2. Navigate to the Password & Security tab

3. Click Add/Setup Authenticator App under the Two Factor Authentication section

4. Follow the instructions to configure an authenticator app by opening or installing any time-based, one-time passcode (TOTP) app on your desktop or mobile device, adding the authenticator key using the QR code or copy-paste, entering the unique code generated for you by the app, and selecting Verify

   • Examples of TOTP apps:

     • Microsoft Authenticator

       • Android

       • iOS

     • Duo Mobile

     • Google Authenticator

     • LastPass

     • Twilio Authy

     • Browser-based options like Authenticator.cc

5. Save the presented list of Recovery Codes in case you ever lose access to the app

6. Signing in will require the time-based, one-time passcode every time you sign in

Supporting Articles

• Two-Factor Sign-In

• Force Two-Factor Authentication for an Organization