Skip to main content

Two-factor Authentication (2FA)

  • Updated
Two Factor Authentication (2FA) is mandatory for all Vault accounts. Below is a step-by-step guide on logging in via two-factor authentication via either the email code or the authenticator app. 

To set up two-factor authentication (2FA), you must ensure a defined email address in your user management. This will need to be added by a system admin user as shown in the User Management Settings knowledge article.

Contents:

Step by step

1. log in as per normal
unnamed.png
2. Upon clicking Sign In and assuming the password is valid, the following will appear: 
unnamed__1_.png
3. You now have two options (Assuming you have never previously setup 2FA within User Management)

Scenario 1 of 2: Obtain Code Via Email

1. Clicking Send Code Via Email, the "2FA code" will be sent to the email address defined in your User Management
unnamed__2_.png
2. This email will arrive within 2 minutes and can be entered within 10 minutes
unnamed__3_.png
3. Using the above example, entering the provided code (575743) will log the user in as normal
We strongly recommend that you use the "Setup Authenticator App Now" method, Otherwise, each time you log in, you will need to wait for the "2FA code" via email.

Scenario 2 of 2: Setup Authenticator App Now

If you have yet to install an authenticator app on your mobile device, you can simply download the Google Authenticator app via the below links:

*Any 2FA Authenticator app can be utilised if preferred*

1. Click Setup Authenticator App Now
unnamed__4_.png
2. This will then populate a unique QR code, similar to the below example
3. The QR code will need to be scanned by the Authenticator App (typically using the + button). Once scanned, you will then be presented with a code for Vault within your authenticator app as shown below
unnamed__6_.png
4. Upon entering the code, this will log you in as normal
In the future, whenever you log into Vault, you will immediately be asked for your 2FA code, with the option to tick Trust this device for 7 days if desired.
unnamed__7_.png

Troubleshooting + Hints & Tips

  • If the date and time of your device is not set to update automatically this can cause Vault to reject the code that is entered. To fix this:
    1. Navigate to the settings menu on your device (with the 2fa authenticator installed)
    2. Select the date and time setting
    3. Set to automatically set the date and time
  • If the user is entering the username and password when setting up the 2FA and they are receiving an error regarding the username/password being incorrect - they may need to update phone settings.
    1. Settings
    2. General
    3. Date and Time. Toggle Set Automatically on. (iOS)

  • We recommend downloading the Authenticator App(listed above), as the email code isn't as fast due to many variables, especially time taken for the code to be received. Once you have authenticated via the App, your details can be remembered for 7 days.

  • If you are using the email code option, you will need to wait for the code each time you log in. If choosing this option, please click this only once until you receive the code.

    • Note that the code may take a few minutes to be delivered & this could be due to server delays outside of Vault's control.

  • Please ensure that you have only 1x option of Vault appearing in the Authenticator App, (this can occur if you have scanned the QR code on separate occasions prior to this method becoming mandatory)
    If you see duplicates for one account, delete all codes, scan the QR code once and you will then see just one code within the Authenticator App.
    To delete this, hold down the code > Select the Pen Icon > Select the Bin Icon > Select the Tick to confirm.
    You may then need to re-scan the QR code when logging in.

  • When prompted to scan the QR Code to enable 2FA via the Authenticator App, please open the app first to scan the code.
    Do not use your phone camera to scan the QR code.

 

 

Related articles