Two-factor Authentication

Note: Two-factor authentication is now available for all subscriptions.

For extra security you can enable two-factor authentication. With two-factor authentication two different things (factors) are required to log in: something you know (your password) and something you have (your phone).

When two-factor authentication is enabled you can no longer log in just by entering your password, you will also need to enter a time-based security code from your phone.

Apps
Our implementation is compatible with OTP apps such as:

Google Authenticator for iOS,
Google Authenticator for Android, and
Microsoft Authenticator for Windows Phone

Restrictions

When two-factor authentication is enabled for a user that user won't be able to use the API.
You cannot use two-factor authentication in combination with Single Sign-on. So if you use Google Suite, Active Directory/LDAP or Slack to log in to Papyrs you can use the two-factor options provided by those services.

Papyrs uses Time based One Time Password (TOTP).

Enabling two-factor authentication

1. Click on your profile picture and go to My Preferences. Then Select "Enable two-factor authentication".

2. Enter your password and scan the QR code in your OTP smartphone App.

3. Enter your OTP security code from your smartphone app.

4. Success! Two-factor authentication is now enabled.

Note: If you lose your smartphone or delete the authenticator app by accident you will get locked out of the intranet. When you forget your password we can send a password reset email so you can regain access, but there is no equivalent for two-factor authentication.