Setting up two-factor authentication (2FA)

Modified on Tue, 5 May at 6:54 PM

Setting up two-factor authentication (2FA)

Two-factor authentication (2FA) adds an extra layer of security by requiring both a password and an SMS verification code during login. Even if a password is compromised, the account remains protected.

TL;DR

Go to Account → Users → Two-factor authentication (2FA) tab. Click Edit default settings, set "Activate 2FA" to Yes, choose whether to apply to existing users, and confirm with your password. All users must have a valid phone number in their profile for 2FA to work.

Get started in 3 steps

1

Enable 2FA by default

Go to Account → Users → Two-factor authentication (2FA) tab. Click Edit default two-factor authentication settings. Set Activate 2FA to Yes. Enter your account password to confirm and save.

2

Choose rollout scope

Decide whether to apply the setting to existing users: "Yes — apply to users with inactive 2FA" updates all existing users who don't already have 2FA enabled. "No — only apply to new users" leaves existing users unchanged. Communicate the change to your team before enabling.

3

Ensure users have phone numbers

2FA sends a code via SMS to the user's registered phone number. Every user who needs 2FA access must have a valid mobile number in their user profile. Check under Account → Users and update any profiles missing a phone number. Users without a number will be unable to complete login with 2FA active.

Read more

How the login flow works with 2FA

  1. User enters username and password as normal.
  2. Hubhus sends an SMS with a one-time verification code to the user's registered phone.
  3. User enters the code on the login screen.
  4. Login completes.

Individual user control

Individual users can enable or disable 2FA on their own accounts through their profile settings — unless an administrator has enforced it as a default, in which case users cannot disable it without admin permission.

If a user cannot receive SMS (no coverage, wrong number), they must contact an administrator to temporarily remove 2FA from their profile and update the phone number.

Common searches

2FA setup • two-factor authentication • SMS login code • enable 2FA • login security • authentication code

Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select at least one of the reasons
CAPTCHA verification is required.

Feedback sent

We appreciate your effort and will try to fix the article