Set Up Two-Factor Authentication on an Account

This article will walk you through how to set up Two-Factor Authentication for an account. When you enable Two-Factor Authentication with the new sign-in, you will have to use your password and a verification code (from an authenticator app) to successfully log in.

Important Notes

• Two-factor authentication has changed from email to authenticator apps in the new sign-in. 
• CivicPlus recommends that every user enables Two-Factor Authentication to provide enhanced security. This industry-standard security convention requires users to use both their password and a secondary form (Authenticator app) to prove their identity at sign-on, hence the term two-factor.
• To remove two-factor authentication from an individual account, the user will need to contact Support.

Instructions

1. Log into the system
   
2. Navigate to the Password & Security tab
   
3. Click Add/Setup Authenticator App under the Two Factor Authentication section
   
   
4. Follow the instructions to configure an authenticator app by opening or installing any time-based, one-time passcode (TOTP) app on your desktop or mobile device, adding the authenticator key using the QR code or copy-paste, entering the unique code generated for you by the app, and selecting Verify
   
   
   • Examples of TOTP apps:
     
     • Microsoft Authenticator
       
       • Android
       • iOS
     • Duo Mobile
     • Google Authenticator
     • LastPass
     • Twilio Authy
     • Browser-based options like Authenticator.cc
       
5. Save the presented list of Recovery Codes in case you ever lose access to the app
6. Signing in will require the time-based, one-time passcode every time you sign in

Supporting Articles

• Two-Factor Sign-In
• Force Two-Factor Authentication for an Organization