Multi-Factor Authentication ('MFA') massively decreases the likelihood of someone being able to break into an online account by ensuring that an attacker not only requires your username and password, but also must have information that comes from another source which is very hard for someone to obtain e.g. a once off code sent by SMS, or a randomly generated number. That's why your Enudge account must be protected with multi-factor authentication, combining your password to login with a 6 digit, random code, generated by the Google Authenticator app.
Steps to set up MFA for your Enudge account:
Download the Google Authenticator App on your smart phone. You can download from iTunes or the Google Play Store. Alternatively, if you do not have a mobile that supports the app, you can install the Google Authenticator App as an extension to your Chrome or Microsoft Edge Browser.
Login to your Enudge account.
In the Dashboard click on the link to Configure Multi-Factor Authentication.
Using your mobile phone, scan the QR code with the Google Authenticator App.
The app will provide you with a 6 digit code, which you need to enter into the form on screen.
Click on the AUTHENTICATE button to complete the setup.
Once MFA is successfully setup, every time you login to Enudge, you will be required to enter the current 6 digit code from the Authenticator App as a second authentication step.
Trouble-shooting:
Sometimes people have trouble getting the first code to authenticate correctly when registering MFA on their account. Here are some tips to help:
Instead of using your camera to scan the code, open up the Google Authenticator App, click on the + button and then scan the QR code displayed on the Enudge screen after you enter your username and password.
If using Chrome, sometimes the browser cache will cause issues. Try either operating in Incognito mode (Ctrl+Shift+N) or using a different browser, say Microsoft Edge or Firefox.
Setting up MFA when you have multiple users:
If you are sharing an Enudge login with other people in your team, we instead recommend creating separate logins for each user. This will allow each user to create and manage MFA for their own login.
Alternatively, if you prefer to have a single Enudge user login, you can share your Google Authenticator code with multiple devices via the following steps:
Make sure that Google Authenticator App has been installed on each person's mobile phone.
From the Google Authenticator app on the mobile phone where you setup authentication into your Enudge account, choose 'Export accounts'.
Select just the Enudge account you wish to share with others.
You will then see a QR code on screen, which can be scanned by additional mobile phones, automatically adding the authentication record on their phone.
Another option is to use the Google Authenticator browser extension, and have each user login to a shared Google Account in their Chrome browser, within browser extension syncing switched on, all users will be able to access the same MFA code via their browser.
What if I lose or change my mobile phone?
If you have purchased a new phone, transferring all your data to the new phone should also transfer your Google Authenticator app records.
If you are unable to transfer all your apps across to your new phone, please turn off MFA via your Enudge Account screen. Scroll down to the section with a button to 'Switch off Multi-factor Authentication', click the button, and enter your MFA code from the Google Authenticator app, then logout. Now sign into your Enudge account again. You will be required to setup multi-factor authentication to continue. Use your new phone, or the Google Authenticator browser extension, to again setup multifactor authentication.
If you have lost your mobile phone, please contact us immediately, and request that your pre-existing MFA is invalidated, so that an unauthorised user cannot access your Enudge account.
Additional reading on the benefits of multi-factor authentication:
Harvard Business Review recommend configuring multi-factor authentication for all digital accounts in light of the recent spike in cybersecurity attacks.
2-Factor Authentication is not enough according to Harvard Business Review - that's why we have implemented multi-factor authentication.
Australian Cyber Security Centre Small Business Guide to Cyber Security - recommends use of multi-factor authentication as a primary way to keep your accounts safe.