Enabling two-factor authentication (2FA)

What is two-factor authentication?

Two-factor authentication (2FA) requires a second set of credentials, in addition to a password and username, before it will allow access to an account. You can read more about the concept in our Security Score guide.

Enabling 2FA on your account

To enable two-factor authentication on your Cloud 66 account:

  1. Open your Dashboard
  2. Click on your account avatar (top-right) and select Account Settings
  3. Click on Login & Security in the Account panel on the left (if you don’t see this option, switch to your default organisation) [*]
  4. Click on the Two-factor Authentication tab
  5. Install an authenticator app on your phone (links are provided), or open 1Password and then click the green Next - Scan barcode and verify button
  6. Scan the barcode provided using your newly installed authenticator app, or using 1Password. You can also manually enter the details of the key if you’re having trouble scanning the barcode.
  7. Enter the verification code provided by your chosen authenticator and click the Verify button

[*] You can switch organisations using the dropdown at the top right of the screen. You need to be in your default organisation in order to change security settings.

Logging in with 2FA

If 2FA is enabled, when you log in you will be asked to provide the current confirmation code from your authenticator app. This code changes constantly (every minute or so), so it will be different every time you log in.

If you use the same computer and browser you will not be asked every time you log in, but we will ask periodically or if anything about your computer changes (such as the network you’re using).

Enforcing 2FA for your team

You can also force all the members of your Cloud 66 account to use 2FA. To do this:

  1. Open your Dashboard
  2. Click on your account avatar (top-right) and select Account Settings
  3. Click on Login & Security in the Account panel on the left
  4. Scroll down to the section named “Enforce 2FA for your Team” and click the green Force 2FA for your_team_name button.

This will oblige all team members to set up 2FA before they are able to access the team’s Cloud 66 account.

Adding a physical FIDO2 security key

Physical security keys add another layer of security to your account, making it even harder for anyone to gain unauthorised access.

There are a numbers of options available for physical keys:

If you need more background info on how physical keys work please read our guide on the subject.

To add a physical key:

  1. Open your Dashboard
  2. Click on your account avatar (top-right) and select Account Settings
  3. Click on Login & Security in the Account panel on the left
  4. Click on the Security Keys tab
  5. Click the + Add Security Key buttom
  6. Follow the instructions on screen to pair your physical device to your Cloud 66 account

Using Mac Touch ID as a physical key

Mac devices which have fingerprint sensors (”Touch ID”) can be used as keys in the latest versions of Chrome, Safari and Edge. The process for adding Touch ID as a key differs slightly between browsers:

For Chrome and Edge:

  1. Click add + Add Security Key
  2. Select “This device” in the browser options panel that pops up
  3. Authenticate with your fingerprint to confirm the request.

For Safari:

  1. Click add + Add Security Key
  2. Then click the Add my Security Key button
  3. A browser pop up will appear asking if you want to allow “app.cloud66.com” to use your Touch ID. Authenticate with your fingerprint to confirm the request.

Troubleshooting

If you’re using a USB-based device:

Log a support ticket
Need help with deployments?
Contact Support
Join the public Slack channel
More Questions?
Join the Slack Channel