You’re probably familiar with two factor authentication if you use services like Google Suite, Apple iCloud, or Xero. It’s sometimes called Two-Factor Authentication/Verification or 2FA for short.
With 2FA enabled, in addition to supplying your email address and password when logging in, you’ll also need to enter a unique code. This code is generated by an app on your smartphone, proving that it’s really you. You’ll need an authentication key each time you login.
Why use Two-Factor Authentication (2FA)?
Two factor authentication adds an additional layer of security to your account. Even if your password falls into the wrong hands, a malicious individual will still require the unique code generated by your device to log in.
How to Set Up Two-Factor Authentication (2FA):
Access your Log-in page, you will be directed to the Set-up verification page.
Before setting up your 2FA, it's worth choosing an Authenticator App on your device to manage your 2FA. If you don't already have an Authenticator App, we would recommend:
Open your Authenticator App and select Add an Account.
Use the QR scanner within the Authenticator App to scan the QR code displayed on the Set-up verification page.
Once the account has been added, it will appear as Current RMS in your Authentication app.
in the current password field enter in your Password.
Select the Current RMS account and it will generate a six-digit code.
In the Two Factor code field, enter the six-digit code.
Click Verify code.
Once verified, 2FA is enabled, and you’re logged in!
Authentication codes expire every 30 seconds, so if the timer is close to running out, wait for a new code before entering it.
Remember me
When logging in with 2FA, you can set it to 'remember' your log in. When inputting your Email and Password, select the Remember me tickbox.
This will remember your account to up to 30 days. After 30 days have expired, you'll be prompted to enter in a code again to re-authenticate your account.
⚠️ If someone logs into an account and selects Remember me on the computer, then goes to another computer and logs into that device with the same account. This increases the risk of malicious and an social engineered attack.