This article explains how to enable Two-Factor Authentication (2FA) in SMARTFENSE, for both Administrators and End Users, using an authentication app and backup codes.
Enabling Two-Factor Authentication
Two-Factor Authentication can be enabled by any user directly from their personal profile. To do so, follow the detailed steps below.
1. Access the user profile
In the upper right corner of the platform, select your user profile and then Edit Profile
2. Go to the Security section
At the footer, look for the Security option and click on go to account security.
3. Enable Two-Factor Authentication
In the next window, press Enable Two-Factor Authentication.
4. Start the process
On the new screen, press the Start button.
You will be prompted to enter the password of the user currently authenticated on the platform.
5. Scan the QR code
The platform will show you a QR code.
Use your authentication app (for example, Google Authenticator, Microsoft Authenticator, or Authy) to scan it and generate a confirmation code.
6. Enter the confirmation code
Once the code is generated in your app, enter it in the Confirmation Code field and press Continue.
7. Activation confirmation
On the next screen, the platform will indicate that Two-Factor Authentication has been successfully enabled.
8. Generate backup codes
Next, you can generate backup codes.
These codes allow access to SMARTFENSE if you do not have access to your authentication app.
Note: backup codes are single-use. Keep them in a safe place.
9. Complete the process
To finish the setup, press Finish.
Disabling 2FA as an instance administrator
An instance administrator can disable 2FA for any user directly from the Users and Groups > Users section, without the end user needing to complete the process from their own profile. This option is useful, for example, when a user loses access to their authenticator app and their backup codes.
Access the Users and Groups > Users section Go to the Users section of the platform.
- Search for the user Use the search field to locate the corresponding user.
Disable 2FA In the Actions column, click Disable 2FA.
Confirm the action The platform will show a confirmation window with the message Do you want to disable 2FA for user [username]?. Click Confirm to complete the deactivation.
Note: the Disable 2FA button only appears in the Actions column for users who have 2FA enabled.
Once disabled, the user can enable 2FA again from their profile by following the steps described in the previous section.
💡 Best practices
- Enable it for both administrators and end users to strengthen security.
- Store backup codes in a secure password manager.
- Keep your authenticator app up to date to avoid issues generating codes.
- If you change devices, remember to disable and re-enable 2FA to ensure continued access.
- If a user loses access to their authenticator app and backup codes, an instance administrator can disable the user's 2FA from the Users section instead of manually generating new codes.