What is 2FA and why is it important?
2FA stands for Two-Factor Authentication. In addition to your email address and password, you also need a unique code from an app on your phone to log in. This extra step makes it much harder for unauthorised users to access your account, even if your password is known.
You log in with something you know (your password) and something you have (your phone with the code). This significantly improves the security of your Payt environment.
How do I set up 2FA in Payt?
Open your Payt environment.
Click your name in the top right to open your profile settings.
Select the ‘Account’ tab in the left-hand menu.
Under ‘Security’, click ‘Activate two-factor authentication’.
Follow the instructions on screen. You will need an authentication app on your phone, such as Google Authenticator or Authy.
Store your backup codes in a safe place.
Why are backup codes important?
Your phone or the authentication app may not always be available – for example, if your phone is lost or damaged. If you change phones, the app usually also does not migrate. With the ten backup codes, you can still log in to your Payt environment.
We recommend storing your backup codes safely, for example in a password manager on your computer.
How do I require all users in my Payt organisation to log in with 2FA?
You can enforce 2FA login for all users in your organisation. You will need administrator rights at the organisation level to do this.
Open your organisation dashboard in Payt by clicking the Payt logo in the top left.
Go to the organisation settings in the top right.
Select the 'Security' tab on the left.
Select 'Make two-factor authentication mandatory for all users'.
The next time a user logs in, they will be required to use 2FA. If they haven't activated 2FA yet, they will see a screen to set it up after logging in before they can continue using Payt.
What if I share my account with multiple colleagues?
2FA is linked to a single person, as the login code is generated in an app on one phone. If you currently share your Payt account with multiple colleagues, this is a good moment to create individual accounts for each of them.
You can add unlimited users in Payt at no extra cost. For security reasons, we recommend that each user has their own account.
Read more: How do I add a new user?
Can I use SSO instead of 2FA?
Yes, you can! If you prefer using Single Sign-On (SSO) instead of 2FA, please refer to this article: How do I log in securely with SSO in Payt?