General Introduction to 2-Factor Authentication (2FA)

What Is Two-Factor Authentication (2FA)?

Two-factor authentication (2FA) is an additional layer of security to protect your GovernSpot User account. Once activated, you must go through two layers of security before being granted access to your account. 2FA increases the security of your User account by requiring two pieces of information from you, your password as well as a one-time code generated by an Authenticator application.

Why Use 2FA?

2FA is designed to prevent unauthorized users from gaining access to your account with only a stolen password. This can happen through a variety of mechanisms but the most common is when you have used the same password on more than one website. Downloading malicious software or clicking on links in emails can also expose you to theft of your password. Despite the minor inconvenience, security experts recommend enabling 2FA wherever possible.

How 2FA Works in GovernSpot

2FA in GovernSpot is established at the User level and each user must individually enable and configure their 2FA authenticator. This is the same process as many enterprise services such as Microsoft Office 365. Currently, GovernSpot requires the use of an Authenticator application for 2FA and will not work with SMS or Text-based code configurations. This was a security decision based on the substantial emerging evidence that SMS/text-based codes are easily compromised.

Therefore users must download an Authenticator application to enable 2FA such as:

• Microsoft Authenticator:
  • Apple iOS
  • Google Android
  • Microsoft Windows Phone
• Google Authenticator
  • Apple iOS
  • Google Android
• Authy Authenticator
  • Apple iOS
  • Google Android
  • Microsoft Windows or Apple MacOS

Links to these applications are provided to the User during the set up process.

For more information about 2FA, please visit this site for a more comprehensive overview.