Set up and use 2 Factor Authentication (2FA)

Two-factor authentication (2FA) adds an extra layer of security to your SupporterBase account. When enabled, logging in requires both your email and password, plus a one-time code (sent by SMS, generated in an authenticator app, or scanned via QR code).

This means even if someone has your password, they cannot access your account without also having your one-time code.

Enabling 2FA for all users (admin)

As an admin, you can require 2FA for every user in your SupporterBase.

1. Navigate to Settings > Configurations.
2. For the setting "What Two factor authentication (2FA) mode would you like to apply to your SupporterBase?", select Required from the dropdown.
3. All users will now need to set up 2FA when they create their accounts or the next time they log in.

Enabling 2FA for your own account

1. In the left-hand navigation, click your account name to go to your account page.
2. At the bottom right, click Enable Two-factor authentication.
3. Click Verify device.
4. Choose your preferred verification method: SMS code sent to your phone, QR code scan, or Google Authenticator (or another authenticator app).
5. Once verified, backup codes will be displayed. Save these somewhere secure (e.g. a password manager). Each code can be used once if you lose access to your phone.

Using 2FA when logging in

1. Log in with your email and password as normal.
2. You will be prompted for a verification code.
3. Enter the one-time code from your SMS message, your authenticator app, or a backup code (if you cannot access your device).
4. Once the code is accepted, you will be logged in.

Further reading