To provide extra protection for your data, you can set up a 2FA (two-step verification) for your organization. This means that after entering their username and password, all users must also log in using a code generated by an Authenticator app like Google Authenticator (recommended).
If you enable 2FA, it applies to all users within the organization. It is not used for ticket buyers in the ticket shop.
Set up 2fa
Setting up the verification process works as follows
Download and install the Google Authenticator app on a mobile device (phone).
Enable 2FA via Settings - Account - Organization - Security. Here you select 'Enabled' to enable the verification.
Every user in your account is now automatically logged out.
Everyone has to log in again. A QR code appears on the screen. You scan this with the Google Authenticator app.
A unique code then appears in the app, which is constantly refreshed. The most recent code is used to log in.
Recovery
You set up the extra verification on a mobile device. If you have lost your device or you have a new one, this verification must be set up again. This can be done using the recovery code that you receive when setting up 2FA. If you don't have that code at hand, only another backstage user can reset it for you.
Users who can log in and manage other backstage users can send you a 2FA recovery email. To do this, go to Settings - Account - Users, open the user, and click ‘Send recovery mail’. At that time, an email is sent to the backstage user. The email contains all the necessary steps for the user to set up 2FA again.
