Enabling two-factor authentication

Turn on two-factor authentication (2FA or MFA) to protect your account with an extra layer of security.

Two-factor authentication will require you to have access to your mobile phone when you sign in. You’ll receive a verification code, either by text message, or from an authentication app on your phone.

Once you have set up two-factor authentication, every time you sign in, you’ll be asked to enter a secondary verification code along with your password. Enter both your password and authentication code in Convo to sign in.

You can choose how you would like to receive your authentication codes. Either by SMS text message or an authentication app of your choice.


Setting up two-factor authentication with SMS

Convo will automatically send an SMS text message with your single-use authentication code each time you sign in to your Convo network.


  1. Go to your Account settings page and click Set up two-factor authentication.
  2. Click SMS text message to receive authentication codes by text message.
  3. Enter your mobile phone number, complete with area and/or zone code to verify your device.
  4. Enter the verification code and select Verify code to finish.

From now on, when you sign in to Convo, enter the SMS code along with your password.


Setting up two-factor authentication with an authentication app

  1. Download and install an authentication app on your mobile phone. Convo can be used with most time-based, one-time password (TOTP) applications. Here are a few great options:
    iPhone: Google Authenticator, Duo Mobile, Authy
    Android: Google Authenticator, Duo Mobile, Authy
  2. Go to your Account settings page and click Set up two-factor authentication.
  3. Click Use an authentication app to retrieve authentication codes from the authentication app on your device.
  4. Use your authentication app to scan the QR code or enter the code manually.
  5. Enter the verification code and select Verify code to finish.

From now on, when you sign in to Convo, just open your authentication app and enter a code along with your password.


Using 2FA with multiple networks

You will need to set up two-factor authentication only once to access all the networks associated with your Convo account (same login email and password).


If you have multiple Convo accounts (different login emails and passwords), you’ll need to set up two-factor authentication for each account separately.


Using backup codes

If you lose your phone or have deleted your authentication app, you can use one of your backup codes to sign in. You can use any one of these codes to sign in to your account. Note that each backup code can only be used once.

These codes were given to you after you set up two-factor authentication for your account, but you can find them again by going to your Account page.

Mandatory network-wide two-factor authentication

As an Admin, you can make two-factor authentication mandatory for all members of your Convo network for added security. It’s quick and easy to set up, and all you need is access to your phone when signing in.


Using two-factor authentication protects your account with an extra layer of security. Once two-factor authentication is enabled, every time you sign in, you’ll be asked to enter a secondary verification code along with your password. Enter both your password and authentication code in Convo to sign in.


Mandatory network-wide two-factor authentication is available on the Pro plan or higher, individual team members are free to set up 2FA regardless of their network’s plan.


Setting up mandatory two-factor authentication for your teammates

  1. Go to the Security page in Network setting.
  2. Select Two-factor authentication and click Activate mandatory two-factor authentication for your teammates.

All teammates will be notified by email to let them know to set up 2FA. Your teammates will have a 24-hour period to set up 2FA on their account settings page. If a teammate has not set up 2FA at the end of 24 hours, they will be signed out. When they try to sign in again they will be prompted to set up 2FA to sign in to their network.


Using 2FA with Single Sign On (SSO)

If you’d like to use two-factor authentication with your SSO account, you’ll need to enable it with your identity provider.


When both 2FA and SSO are set up, guests will be required to use 2FA to sign in since guests are not required to use SSO.

 
© Convo 2018