Administrators on your CoverageBook workspace can enable two-factor authentication for all team members.
Users can sign in using a 6-digit code provided by the authenticator of your choice (1Password, Google Authenticator, Authy...). 2FA codes can be used whether you're signing in with a password, or via a Google or Microsoft workspace.
How to enable 2FA for your team
Account admins can visit the main settings menu - team tab, and click on the two-factor menu. From here, click the checkbox to enable 2FA. We'll send an email to everyone reminding them to register.
Team members will have up to 14 days to setup 2FA for their logins. After this time, they'll be prompted to set it up before they can sign in.
How to setup 2FA
As soon as 2FA has been enabled on your workspace, users will see a prompt to activate when they login. We'll also send an email with a link to set it up.
Users can also go to the main settings - team page - two-factor, and click on the link to set it up.
We'll show you a QA code:
Open your authenticator app (1Password, Google Authenticator, Authy…).
Scan this QR code.
Enter the six-digit code it shows to confirm.
Once setup, you'll be asked for your current 6-digit code each time you sign in using a password, or via SSO with Google or Microsoft
Recovery Codes
When you register for 2FA, we'll show you 5 recovery codes. Please make a note of these and keep them safe (you can use one instead of your 6-digit code if you can't access your authenticator).
Generate new recovery codes or temporarily disable your 2FA
When signed in, team members can request a new set or recovery codes, or disable 2FA to set it up again if you want to use another authenticator.
Go to the main settings - team - two-factor page and click on the 'change your own' link.
You'll need to enter your password or current authenticator code to generate new recovery codes. You can also disable 2FA, and you'll be prompted to set it up again as soon as you next sign in.
How to reset 2FA for a user
* If you can't find your recovery codes and can't sign in via 2FA, contact one of your account admins who can reset you
Admins can reset any team member's 2FA when needed. Go to the main settings - team page and click on the reset 2FA button. It'll send an email with a link to set it up, and they'll need to complete 2FA before being able to sign in again.
Disabling 2FA for your workspace
If at any point in the future you'd like to disable 2FA for your team, visit the settings - team - two-factor page and you can uncheck the enable two-factor box and hit the save button.
This removes 2FA from all users. If you choose to set it up again, your team will have 14 days to complete their 2FA sign ins.