Enable or Manage 2FA

This article will show you how to enable 2FA

On this page:

Enable 2FA from prompt

If you are prompted to set up 2FA after registration or log in this means that you are joining an organisation on Dekko the has 2FA enforced:

1. Download the Microsoft Authenticator app from the App Store (iOS) or Play Store (Android). Dekko also unofficially supports open source authenticators for iOS and Android.
   
   

   Note: be careful to avoid advertised alternatives to the options given above. Promoted alternatives are usually marked with [Ad].

   Dekko does not support or recommend the use of any 'paid' authenticator apps. If a 2FA app demands payment, do not use it.
   
   Free alternatives to Microsoft Authenticator are also able to be used, such as Google Authenticator, Authy, Okta Verify, etc.

   
   
   
   
2. Add your Dekko account token to the Authenticator app
   
   If you are using the Microsoft authenticator app for the first time and see the screen below you can skip the first setup page and then select "Add non-Microsoft account"
   
   
   If you have used the app before and see the screen below press the + button and then select "Other"
   
   
3. Place the QR code on the Dekko interface within the viewer marked by the blue elements on the 2FA app; a code will be generated instantly. If you have more than one phone you can scan the QR code on that device at this time.
   
   
   This code will be refreshed every 30 seconds. If the code changes before you enter it in to Dekko, do not worry – you can enter the new one.
   
   Do not attempt to scan the QR code in the image above! Please log in to Dekko to access your 2FA setup code.
   
   

4. Enter the code displayed and then press ‘Approve’
   
   

   2FA is now active on your account!

Enable 2FA manually or refresh 2FA

For non-enforced accounts, 2FA can be enabled in your profile settings:

1. Download the Microsoft Authenticator app from the App Store (iOS) or Play Store (Android). Dekko also unofficially supports open source authenticators for iOS and Android.
   
   

   Note: be careful to avoid advertised alternatives to the options given above.

   Promoted alternatives are usually marked with [Ad].

   Dekko does not support or recommend the use of any 'paid' authenticator apps.

2. Open the 2FA section in your profile settings and then press 'Enable 2FA'
   
   
   If you have already enabled 2FA but need to generate a new token, press 'Regenerate Code'
   
   
3. Add your Dekko account token to the Authenticator app
   
   If you are using the Microsoft authenticator app for the first time and see the screen below you can skip the first setup page and then select "Add non-Microsoft account"
   
   
   If you have used the app before and see the screen below press the + button and then select "Other"
   
   
4. Place the QR code on the Dekko interface within the viewer marked by the blue elements on the 2FA app; a code will be generated instantly. If you have more than one phone you can scan the QR code on that device at this time.
   
   
   This code will be refreshed every 30 seconds. If the code changes before you enter it in to Dekko, do not worry – you can enter the new one.
   
   Do not attempt to scan the QR code in the image above! Please log in to Dekko to access your 2FA setup code.
   
   If you have set up a token on your new phone, please delete the old one on your old phone.
   

5. Enter the code displayed and then press ‘Approve’
   
   

   2FA is now active on your account! You can also disable 2FA using this page.

2FA set troubleshooting

If you are having trouble enabling 2FA please check the following:

• You are using the Microsoft Authenticator app, and it is up to date
• You have chosen the 'other' account type when adding Dekko as a new account
• The time and date on your phone match the time and date on your computer as well as your local time
  • If times do not match, use the automatic time and date setting on your devices
    • iPhone
    • Android
    • Mac
    • Windows

If you have checked the above and issues persist, please restart your phone.

What is TOTP 2FA?

TOTP (Time-based One-Time Password) two-factor authentication is an authentication method that requires two factors to gain access to a system or application. The two factors are something the user knows (a password) and something the user has (such as a phone with an authentication app).

The authentication app generates a code that is valid only for a short period of time (usually 30 seconds). This code must be entered in addition to the password in order to gain access to the system or application. TOTP is considered more secure than other two-factor authentication methods (such as SMS-based!) because the code is only valid for a short period of time, making it more difficult for a potential hacker to gain access.

Some popular apps that support TOTP 2FA include Microsoft Authenticator, Google Authenticator and Authy.