How to Set up 2FA in SocialPilot Account?

Two-factor authentication (2FA) adds an extra layer of security to your SocialPilot account by requiring your password and a second form of verification. While 2FA is highly recommended for enhanced security, it is not mandatory for all users (unless your admin or owner enforces it).

Team members and clients can opt to set it up individually without administrative intervention. However, for owners and administrators who manage broader organizational settings, setting up 2FA through the admin panel is a straightforward option that provides an extra safeguard for sensitive data and access privileges.

Let us see how to set up, enforce, and manage 2FA for various roles, i.e., owner, admin, team member, and client within the SocialPilot platform.

In this article

1. Set up Two-Factor Authentication for Owner and Admin
2. Set up Two-Factor Authentication for Team Members and Clients

Set up Two-Factor Authentication for the Owner and Admin

Here is how you can set up two-factor authentication for the owner and admin:

1. Click on your profile at the top right corner of your platform and then on Users.

2. Now select the Security Tab. This is where you can manage all security-related settings for your account.

3. Find the Setup two-factor authentication (2FA) and click on the toggle to activate 2FA.
4. A prompt will appear asking you to set up 2FA. Click Setup 2FA to start the configuration process.

5. A popup window will display a QR code. Use an authenticator app on your mobile device to scan this code.
6. The app will generate a 6-digit verification code. Enter this code to verify the connection between your app and your account.
7. After setting up the authenticator, you have to now provide a recovery email (different from your account's primary email), which is essential if you ever lose access to the authenticator app.

8. A verification code will be sent to this email. Enter the code to complete the setup.
9. After the verification of the recovery email, your 2FA setup is complete. You will be redirected back to the security settings page.

Upon successful setup, you can enforce the 2FA for team members and clients so that the system prompts them to set up their 2FA while logging in.

10. Go to Enforce two factor authentication (2FA) and enable it.
11. Now, select if you want to enforce 2FA for team members, clients, or both.

You will get a success message that the 2FA has been successfully enforced. Now, the users with team members and client access will have to set up their 2FA.

Set up Two-Factor Authentication for Team Members and Clients

Suppose the SocialPilot admin or owner has already enforced the 2FA setup. In that case, users with a team member or client access will see a pop-up notification informing them that the organization has made it mandatory to set up 2FA for their accounts.

The notification will also display a countdown, showing how many days are left to comply with this new security requirement. Upon receiving the notification, the users have a grace period of three days, during which they can choose to set up 2FA at their convenience.

Here is how you can setup 2FA on SocialPilot:

1. Click on the Setup 2FA Now button in the pop-up notification. The system will prompt you to confirm your password to proceed with enabling 2FA and verifying your identity to secure the process.

2. After confirming your password, the system will display a QR code. Open your authenticator app (such as Google Authenticator, Microsoft Authenticator, or Authy) on your mobile device.

3. Scan the QR code displayed on your screen. This action links your account to the authenticator app.
4. Your authenticator app will generate a 6-digit verification code. Enter the Verification Code from the Authenticator.

Your code will now be verified.

3. After verifying the setup via the authenticator, the system will prompt you to add a recovery email.

4. Enter a recovery email that differs from your account's primary email address. You will receive a verification code in your recovery email.

4. You will receive the code on the email address you entered. Enter the code to finalize the setup of your recovery options.

Your code will now be verified.

Once you verify the recovery email, you will receive a confirmation that 2FA has been successfully enabled on your account.

In case, your organization has not enforced 2FA, you can still setup the 2FA for your account by going to Profile ->Users -> Privacy -> Setup 2FA.