Introduction to two-factor login authentication

Two-factor authentication (2FA) adds an extra layer of security to your Checkfront account by requiring Staff and Partners to verify their identity with a one-time code, in addition to their username and password, each time they log in. This article introduces the feature and explains how to require it for all user accounts or select Staff and Partners.

Read this introduction to our Two-Factor Login Authentication feature, including how to require Two-Factor Authentication for all or select Staff and Partner accounts.
 

Accessing the features mentioned in this article

Where can I find this feature using the top menu?

• Profile > Two-Factor Authentication
   

What more do I need to use this feature?

• Admin permissions to view the status of Two-factor Authentication on Staff accounts.
   

Logging in using Two-Factor Authentication (2FA) Are you having problems logging in using Two-Factor Authentication? Check out the following article: Logging into Checkfront

Xero requires two-factor authentication Xero requires all Users to set up Two-Factor Authentication (2FA) to comply with mandated security protocols. Learn more about the Xero integration here: Introduction to the Checkfront integration with Xero Online Accounting

Two-factor Authentication is a popular security feature that adds an extra layer of protection to your account, username, and password.

There are many forms of Two-Factor Authentication, but the most common method uses a code generated by your smartphone to authenticate your login request.

Our Two-Factor Authentication feature does just that. It requires the Staff member or Partner to enter a one-time code using their preferred authenticator app (e.g., Google Authenticator for Android or Apple devices) or manually enter a code sent to them via text.

This is an optional feature (unless required by a third-party integration) that can be configured to be required for all User Accounts, for select accounts, or enabled by individual Staff members or Partners in their Profile settings.

To require two-factor authentication for all accounts, follow these steps:

1. From the Manage menu at the top of the page, select User Accounts.
2. Next, click on the Account Settings button under the Staff Accounts tab.
3. Check the Require Two-Factor Authentication for all Accounts setting.

Click Save to finalize the setting change, and you are done! Users are then prompted to authenticate when they log in.

Enabling this setting hides the option in Staff/Partner profiles Enabling this setting automatically hides the option within Staff/Partner profiles, which is now required for all accounts.

Learn more about User accounts For a detailed look at configuring User account settings from an Admin perspective, check out the following articles: Introduction to Staff accounts Introduction to Partner Accounts

You can also require Two-factor Authentication for select Staff or Partner accounts.

1. From the Manage menu at the top of the page, select User Accounts.
2. Next, click the name of the User you need to secure.
3. From the Profile tab, check the Require Two-Factor Authentication under the Login Username section.

Click the Save button to finalize the setting change, and you are done! The User is then prompted to authenticate upon login.

Learn more about profile settings For a detailed look at configuring User account profile settings from an Admin perspective, check out the following articles: Configuring Staff account profile settings Configuring Partner account profile settings

Next Steps

Once you’re comfortable with the basics above, check out these deeper-dive articles:

• Enabling two-factor authentication within user accounts
• Securing your account with two-factor authentication

The following article in this series looks at how to enable two-factor authentication within User Accounts.

Enabling two-factor authentication within User accounts >