Two Factor Authentication

What is two factor authentication

Two factor authentication is a method to secure access to a website where in addition to your username and password, an additional code is needed when you login to the website. This ensures a high level of security and prevents your account from being compromised in case your password is hacked. 

Applications for TFA

It is highly recommended that all users of the website setup two factor authentication. In order to setup two-factor authentication you will need an TOTP (Time based One Time Password) generating application. These applications can be downloaded on your smartphone and can be used to generate an OTP without requiring an active internet connection. Some applications which provide TOTPs are:

1. Google authenticator
2. Authy
3. Duo Mobile
4. Aegis

There are more applications available on your application store. Please note that you may be having an application in your phone / computer if you have been using two factor authentication for other websites.

Kindly note SURAQSA does not recommend a specific TFA application. 

Steps

In order to setup two-factor authentication please follow the steps below:

1. Login to your account as you would do routinely. You can use your username or email address to login. 
2. After logging in you will see a tab on your user profile page called "TFA"
3. Clicking this tab will open a page where you can setup two factor authentication. 
4. There will be two options available on the page:
   1. TFA application: This allows you to generate verification codes from desktop / mobile applications
   2. Recovery codes: This is a set of text codes to be used in case you loose access to your TFA application
5. Click on Setup Application to setup the TFA app. Basically this will show a QR code which you can scan using your authentication application of choice. Once the application recognizes this QR code it will generate a random number which you can enter on the box below to setup the application.
6. You can choose to trust the computer for 30 days. This will ensure you do not need to enter the code again and again on the same computer. Please do not do this in a public computer. 
7. After this you can generate the text codes by clicking on the generate codes link. After you copy the generated text codes please ensure that you click the confirm button. Please save this text file in a safe place. 
8. Congratulations ! You have set up two-factor authentication successfully.

Please remember the system will ask you to enter your password when setting up the application and text code. This is the same password you use to log in to the website.