Skip to main content

Two-Factor Authentication

Updated

Two-Factor Authentication (2FA) provides additional security for your Studycast account by requiring users to enter an access code at login in addition to the username and password. Your Studycast admin controls the 2FA policy for your account and can choose to require it, offer each user the choice of whether to use it, or disable it for all users.

Enable and Set Up Two-Factor Authentication

If 2FA is required, or if it is allowed and you choose to use it, you will need to set it up before you can use it.

To set up 2FA:

  1. Install an app on your phone or other mobile device that supports Time-based One-Time Password (TOTP) authentication and generates 6-digit access codes with HMAC-SHA1 function, such as Google Authenticator, LastPass Authenticator, etc. Keep in mind that you will use this device to generate an access code each time you log into the Studycast system.
  2. Log into the Studycast system. On the Studies page, click Profile in the top right. The User Profile window opens.
    userprofile-tfa.png
  3. In the User Profile window, select the Two-factor authentication tab.
  4. Check the Enable two-factor authentication (2FA) box (if not already checked).
  5. Scan the QR code using the app on your mobile device. Scanning the code will associate your Time-based One-Time Password (TOTP) app with your Studycast account.
  6. Click the Submit button.
  7. In the Verify Two-factor authentication setup window, enter the access code currently displayed in the app on your mobile device.
  8. Click the Verify button.

Two-factor authentication is now enabled and set up. The next time you log into the Studycast system, you will need to enter the access code displayed in the app on your mobile device. The access code is time sensitive, and the app will generate a new one every 30 seconds.

Use the Recovery Code to Log In

A recovery code is displayed on the Two-factor authentication tab of the User Profile window. Store this recovery code in a safe place.

If you need to log in without the mobile device that has the authenticator app, you can use the recovery code to log in. Note that this recovery code can only be used one time. When you use it, a new QR code will be displayed in the User Profile window.  You will need to scan this new code and follow the steps above to set up 2FA again.  

After you use the recovery code, a new recovery code will also be displayed in the User Profile window. Be sure to store this new recovery code in a safe place.

Related articles