Two-Factor Authentication (2FA)

Two-Factor Authentication (2FA) is a security process that enhances Trustform user accounts' protection by requiring two different forms of identification to access an account.

Two-Factor Authentication Management

In addition to a password, users that have 2FA feature switched on, must provide a second factor – typically a temporary code generated by an app (like Google Authenticator). This added layer of security significantly reduces the risk of unauthorised access, even if the password is compromised.

⚠️ Please note that Trustform does not send 2FA codes via SMS or email. You must use an authenticator app.

Please note that two-factor authentication is currently optional across the platform. 2FA can be managed by individual users directly through their own accounts. At this time, administrative control over 2FA settings for other users is not supported. To enable 2FA in your account, please follow these steps:

1. Go to your profile: Profile → Profile settings → Security → Add two-step verification→ Add authenticator application.

2. A QR code and a secret key will appear on the screen.

3. Download and install any authenticator app that supports the TOTP standard. Common options include:

   • Google Authenticator

   • Authy

   • Microsoft Authenticator

   • 1Password

4. Scan the QR code or enter the secret key manually into your authenticator app.

5. Enter the code generated by the app into Trustform to complete the setup.

Please make sure to save the backup codes, if provided. These are required in case you lose access to your device.

Known Issues

Following our technical investigation, we established that WatchGuard displays the 2FA code's lifetime incorrectly in the app interface. Due to this error, we do not recommend using WatchGuard for 2FA setup in Trustform.

Troubleshooting

1. If you need to replace your device or reinstall your authenticator app, please follow these steps:

   1. Remove 2FA from your Trustform account: Profile → Profile settings → Security → Remove two-step verification.

   2. Delete the Trustform account from your authenticator app.

   3. Set up the 2FA again using the steps above.

2. Trustform supports any application that is compatible with the TOTP protocol. If your code is not working, please verify that:

   1. The correct account is selected in the app.

   2. There are no duplicate or outdated entries, e.g.. those that were set up on another device.

3. If you no longer have access to your authenticator app and cannot log in, please contact Trustform support to request a 2FA reset.