Skip to main content

Set up two-factor authentication

Two-factor authentication (2FA) asks for a one-time code at login in addition to the password. Turn it on from My profile with an authenticator app, and store backup codes for when that app is unavailable.

Enable two-factor authentication

The setup dialog accepts Google Authenticator or Microsoft Authenticator.

  1. 1

    Open My profile

    In the CDB Technical Web Portal, click the avatar in the top-right corner and select Profile.

  2. 2

    Click Enable 2FA

    Two-Factor authentication section with the Enable 2FA button

  3. 3

    Install an authenticator app

    In the Enable Two-Factor authentication dialog, download and install one of the listed apps:

  4. 4

    Scan the QR-code

    In the authenticator app, scan the code shown under Scan the QR-code.

  5. 5

    Enter the code and click Check

    Enter the six-digit code from the app and click Check.

    Enable Two-Factor authentication dialog with a QR code

After Check succeeds, 2FA is active for that user.

Generate backup verification codes

After 2FA is active, the Two-Factor authentication section shows an Enabled badge, Disable 2FA, and Generate backup code. Backup codes sign the user in when the authenticator app is unavailable.

To generate codes, click the avatar in the top-right corner, select Profile, and on My profile click Generate backup code.

Two-Factor authentication section with Disable 2FA and Generate backup code

Each backup code can be used only once. Generate backup code replaces the previous set.

The dialog is titled Copy backup verification codes. It shows five codes, with Print, Copy, Download, and Regenerate. Store the codes before closing the dialog. Regenerate replaces the current set.

Copy backup verification codes dialog

Log in with two-factor authentication

With 2FA active, the login page asks for an authenticator code after the password.

  1. 1

    Enter the email and password

    On the login page, enter the email address and password, then click Log in.

    Login page with email, password, and Log in

  2. 2

    Enter the verification code

    On Enter authenticator passcode, enter the code from the authenticator app in Verification code, or a backup code, then click Log in.

    Enter authenticator passcode screen

Disable two-factor authentication

Disabling 2FA sends a confirmation link to the email address on the account.

  1. 1

    Open My profile

    In the Customer Portal, click the avatar in the top-right corner and select Profile.

  2. 2

    Click Disable 2FA

    In the Two-Factor authentication section, click Disable 2FA.

    My profile page with the Disable 2FA button

  3. 3

    Confirm the dialog

    In the confirmation dialog, click Confirm. A confirmation link is sent to the email address on the account. The address is masked in the dialog.

  4. 4

    Open the confirmation link

    Open the email and click the confirmation link.

2FA is inactive, and the Customer Portal returns to My profile.

The confirmation link is single-use and expires after a short period. If the link has expired or was already used, an error page appears. Return to My profile and click Disable 2FA to request a new link.

User 2FA status

To view 2FA status, click the avatar in the top-right corner, select Profile, then in the sidebar select All users. The table has a Two-Factor authentication column for each user. Filter that column with Activated or Not activated.

Require 2FA for all users in the account is on the same page. The control states that users without 2FA are asked to set it up the next time they sign in, including users invited later. The switch stays unavailable until 2FA is enabled on the signed-in user's profile, and the tooltip says to enable 2FA in the profile first.