Two-factor authentication ensures that only an InfoSum account holder can access their account, even if someone else knows their password.

A "two-factor authentication" or 2FA is an extra layer of security to prevent unauthorized access to a user’s InfoSum account. Users should opt to use 2FA for enhanced security. In addition to the standard username and password procedure, users are required to authenticate their identity by entering the code displayed by a suitable mobile phone application (such as Google Authenticator).

Turn on/off two-factor authentication for your InfoSum account

1. Navigate to your account settings from the menu on the top right of the Platform.
   
2. On Account Settings, select Login Settings.
3. On the Two-factor authentication section, click Turn on two-factor authentication to display the QR code/secret key.
4. Scan the QR code with your authenticator app. If you don't have an authentication app, some of the most popular apps to use are Google Authenticator or Microsoft Authenticator.
   
5. Enter the verification code (aka authentication code), your InfoSum account password and click Update. 

Two factor identification is now enabled for your account. You will be required to enter a one-time authentication code each time you log in. 

To turn off two-factor authentication, repeat steps 1-2 and click Disable two-factor identification. 

Enforce two-factor authentication for your company

Only a company owner with the Companies-Update 2FA right can enforce 2FA for all company users. By default, 2FA is not enforced for a company.

1. Navigate to your account settings from the menu on the top right of the Platform.
2. On InfoSum Account, go to the Settings tab under My Company.
3. Select/deselect the Enforce 2FA for all users option. 
   

Invalidate two-factor authentication for a user

Only a company owner with the Companies-Update 2FA right can invalidate 2FA for a user. A user can turn on 2FA to re-enable it. 

1. Navigate to your account settings from the menu on the top right of the Platform.
2. On InfoSum Account, go to the Users tab under My Company.
3. Drop down the Action menu for a user and select Invalidate 2FA.
4. Click Invalidate in the message that appears to confirm that you want to invalidate the user’s 2FA. The user's 2FA status is updated to show an exclamation mark.
   
   

For more about administering users, see the company accounts user and admin guide.