In this article

Two-factor Authentication (2FA)—also called Multi-factor authentication or Two-step authentication—is a way to secure your DNSFilter account further by requiring more than just a username and password.

2FA uses any device capable of generating a Time-based One-Time Password (TOTP) authentication code, such as Google Authenticator, Authy, or Duo authenticators. 

DNSFilter offers 2FA enablement on the Account and Organization level. 

Enable account two-factor authentication

Follow these steps to enable 2FA on your DNSFilter account. This process requires access to your chosen 2FA app and mobile phone. 

1. From the DNSFilter dashboard, select your Account icon
   1. Select Account
      
      
      
      
2. Under Security, select Enable Two-Factor Authentication
   
   
   
   
3. Select Set up using an app

Continue following the in-dashboard instruction to enable the two-factor authentication.  

Enable organization two-factor authentication

User accounts with Admin permissions or higher can enable 2FA for their users from the DNSFilter dashboard. 

🚨 Important: Setup 2FA from your own Account before enabling for the organization. If it is not setup on your account, toggling this switch will immediately log you out of the app and prompt you to setup 2FA to access the dashboard. 

Once enabled, users are prompted to enable 2FA for their account on their next login.  

1. From the DNSFilter dashboard, select Organization (or MSP)
   1. Select Settings
2. Toggle Require two-factor authentication on
   1. Users will receive a prompt to enable 2FA when they next login
      
      

The user's Two-Factor Auth status will be Pending until they login and complete the 2FA setup.

To check a user's status, Navigate to Organization and select Users.

Reset two-factor authentication

Owners and Admins follow these steps to reset a user's 2FA.

1. From the DNSFilter dashboard, select Organization (or MSP)
   1. Select Users
2. Navigate to the user that requested the reset
3. Select the lock icon under Actions
   
   

The user's 2FA is now reset. They'll receive a prompt to re-authorize their 2FA when they next login.