Two-Factor Authentication (2FA)

The use of multiple-factor authentication methods provides an additional layer of security to your account.

In this article, you’ll learn to confirm your account’s ownership with two different validation methods. Our systems enable the use of the following factors to authenticate yourself:

• something you know (e.g. a password/passphrase)
• something you have (e.g. a one-time password)

To enable this security feature, you’ll need to accomplish the following:

• Enable 2FA on your SecurityTrails™ account 
• Install and configure a one-time password application

SecurityTrails account configuration

Be sure that you are logged into your SecurityTrails™ account and click on the User Details tab.

Once you’ve clicked on Enable Two-Factor Authentication, another window will appear with a QR code for you to scan with your desired OTP application.

To finalize the setup, you’ll need to provide the 6-digit code from the OTP app. Below you’ll find instructions on how to do it.

Configuring the OTP app

This step involves the use of a 3rd-party application. It’s required for the user to download and install one of their choice. A list of the most popular OTP apps are:

• Google Authenticator (Android/iOS)
• FreeOTP (Android/iOS/Opensource)
• Microsoft Authenticator (Android/iOS)

In this case, we’re using Google Authenticator.

When you scan the QR code with the application, the SecurityTrails™ account and website will appear.A new, unique code is generated every 30 seconds, and once you type it in 2FA will be activated.  
You can set 2FA to be required every time you log in to our website, or you can opt out and set it to be required once every 30 days. 

After the login screen, you’ll need to input the code from the Google Authenticator.

Also, there’s an option you can set not to prompt 2FA every time you want to log in.

Once this is checked, you’ll be able to log in without being asked for the 2FA code for the next 30 days.