Multi-factor authentication (MFA/2FA)

Enabling

MFA can be enabled for all users, for types of user or for individual users. This is configured by your administrator.

Registration

If any of these settings are enabled, the next time an affected user logs in to Imageshop, they will get a prompt to scan a QR-code.

It is important that they scan this code with their authenticator app. We recommend using Google Authenticator, but any OTP authenticator will work. For example Microsoft Authenticator, LastPass Authenticator and FreeOTP.

When they have scanned the code, a new entry will appear in their authenticator. It will look similar to this:

Now they must enter the code into the authentication code field underneath the QR-code.

Make note the timer. The authenticator will generate a new code every 30 seconds. If the code is not entered before the time is up, the user will get an error message and will be asked to try again. If they are slow in entering the code, they should be encouraged to wait until the timer expires and a new code is generated before attempting again.

Also note that this and only this entry is valid for login to Imageshop for that specific account. If they have other accounts registered in the authenticator, whether at Imageshop or elsewhere, they will each get their own code in the authenticator. Make sure to use the code matching the account you're trying to log in with.

Logging on

Once they have successfully registered the MFA authentication code, they are logged in. When they log in again in the future, they will be prompted to enter your authentication code again, but without the QR-code being displayed.

Should they for some reason lose their authentication code, you need to reset their QR-code. Go to their users settings page and scroll down to the 2FA section.

Click the "Remove 2FA" button and confirm that you want to do this. The next time the user tries to log on, a new QR-code will be generated and the process will start over from that step.