Setting Up an Authenticator App for Two-Factor Authentication
What Is Authenticator App Support for Two-Factor Authentication?
Authenticator App Support for Two-Factor Authentication (2FA) adds an extra layer of security to your CRM account by integrating time-based one-time password (TOTP) functionality. This allows you to link your account with popular authenticator apps—such as Google Authenticator, Microsoft Authenticator, or Authy—to generate secure, time-sensitive codes during login. Using an authenticator app provides stronger protection against threats like phishing and SIM-swap attacks compared to traditional SMS or email verification methods.
Key Benefits
Using an authenticator app for 2FA offers several advantages:
- Enhanced Security: Protects your account with time-based codes that are resistant to interception.
- Flexibility: Choose from a wide range of TOTP-compatible authenticator apps based on your preference.
- Compliance: Aligns with modern security standards and best practices.
- Backup Codes: Provides one-time-use backup codes to regain access if you lose your authenticator app.
How to Set Up an Authenticator App
Step 1: Navigate to Two-Factor Authentication Settings
Go to Agency settings → My Profile. Click the Setup button to begin. You will see a QR code and a manual setup code—use your authenticator app to scan the QR code or enter the code manually.
Step 2: Enter the One-Time Password
After adding the account to your authenticator app, it will generate a one-time password (OTP). In the CRM, click Next, enter the OTP, and complete the setup.
Step 3: Save Your Backup Codes
Once setup is complete, you will receive 10 backup codes. Save these codes securely—each can be used only once if you lose access to your authenticator app. You can regenerate backup codes from My Profile if needed.
Important Notes
- Only the primary user can set up an authenticator app for their own account. Admins cannot configure it for other users via “login as.”
- The authenticator app will display your agency name and is tied to your user-agency combination.
- On your next login, select the authenticator app option and enter the current OTP from your app.
Frequently Asked Questions
Can I use any authenticator app?
Yes, any TOTP-based authenticator app is supported, including Google Authenticator, Microsoft Authenticator, and Authy.
What if I lose my device or backup codes?
You can regenerate backup codes from My Profile, but it’s essential to store them securely to prevent unauthorized access.
Who can set up the authenticator app?
Only the primary user can set it up for their account. Admins cannot configure it for others.
How many backup codes are provided?
Ten codes are generated at a time, and each can be used only once.
How is this more secure than SMS or email?
Authenticator apps generate time-sensitive codes that are less vulnerable to phishing and SIM-swap attacks than codes sent via SMS or email.