Turn on two-factor authentication

Verify your email address first

You can turn on two-factor authentication only for a login with a verified email address, so check this first. A verified address also makes sure that you receive notices about your account.

1. Sign in to the Enfonica Console.
2. In the bottom-left corner, select your name, and then select Account. The My account page opens.
3. Under Account information, look at Email verified. If it says Verified, go to Turn on two-factor authentication.
4. If it shows a Verify link instead, select it, and then select Send email.
5. Open the email, and follow its link.
6. Refresh the My account page. Email verified now says Verified.

Turn on two-factor authentication

With two-factor authentication, signing in to the Console needs your password and a code from your phone. A stolen or guessed password isn't enough on its own. A project Owner also needs it to change toll fraud prevention settings, so turn it on before you ever need to change them.

1. On the My account page, under Two-Factor Authentication, select Enable.
2. Enter your current password, and then select Continue. A QR code appears.
3. In your authenticator app, add a new account, and scan the QR code. If your phone can't scan it, enter the key shown below the QR code into the app instead.
4. Under Verification code, enter the 6-digit code from the app, and then select Verify and enable. The Console confirms that two-factor authentication is enabled.
5. Select Close.

Check that it worked

1. On the My account page, make sure that Two-Factor Authentication shows Enabled (TOTP).
2. In the bottom-left corner, select your name, and then select Logout.
3. Sign in again. After you enter your password, the Console asks for an Authentication code.
4. Enter the current code from your app, and then select Confirm. The Console opens as usual.

What if the QR code won't scan?

The QR code uses TOTP, the open standard behind most authenticator apps, so any of them can read it. If yours can't, try these fixes in order:

1. Update the authenticator app to its latest version.
2. Instead of scanning, enter the key shown below the QR code into the app.
3. Try a different app, such as Google Authenticator.

What if the code isn't accepted?

Enter the code that the app shows at that moment. Each code is valid only briefly.

If codes keep failing, check that your phone sets its date and time automatically. The codes are calculated from the time. If a phone's clock has drifted, it produces codes that the Console won't accept.

What should I do before changing phones?

Move your codes to the new phone while you still have the old one. Most authenticator apps have a transfer or backup feature for this. If yours doesn't, use a code from the old phone to turn off two-factor authentication on the My account page. Then turn it on again with the new phone.

What if I lose my phone?

Contact us from the email address you sign in with. We'll confirm that it's you before we turn off two-factor authentication on your login. Without your authenticator app, you can't sign in, and turning off two-factor authentication needs a current code.

Turn two-factor authentication off

1. On the My account page, under Two-Factor Authentication, select Disable.
2. Enter your Password and the current Authenticator code from your app.
3. Select Disable MFA. The card shows Enable again.

If your organization requires two-factor authentication, Disable is grayed out, and you can't select it.

Questions