Two-factor authentication

What Is Two-Factor Authentication?

Two-factor authentication (2FA) adds an extra layer of security to your Deskwoot account by requiring a second form of verification in addition to your password. Even if someone obtains your password, they won't be able to access your account without the unique, time-sensitive code generated by your authenticator app. Enabling 2FA is one of the most effective steps you can take to protect your account and your customers' data.

Enabling 2FA

Follow these steps to turn on two-factor authentication for your Deskwoot account:

1. Log in to your Deskwoot account.
2. Navigate to Profile Settings > Security.
3. Click Enable Two-Factor Authentication.
4. Open your preferred authenticator app (such as Google Authenticator, Authy, or Microsoft Authenticator) on your mobile device.
5. Scan the QR code displayed on screen with your authenticator app.
6. Enter the six-digit verification code generated by the app to confirm setup.
7. Store the backup/recovery codes provided in a safe location. You will need these if you lose access to your authenticator app.

Best-Practice Tips

• Save your recovery codes: Write them down or store them in a secure password manager. These codes are your safety net if your device is lost, stolen, or reset.
• Use a dedicated authenticator app rather than SMS-based verification when possible, as app-based codes are more resistant to interception.
• Encourage your entire team to enable 2FA, especially agents and administrators with access to sensitive customer information.
• Keep your authenticator app updated to ensure compatibility and receive the latest security patches.

Troubleshooting

Verification code not working

Authenticator codes are time-sensitive. Make sure the clock on your mobile device is set to automatic or synced accurately. Even a small time drift can cause codes to be rejected.

Lost access to your authenticator app

Use one of the backup/recovery codes you saved during setup to log in. Once logged in, disable 2FA and re-enable it with your new device or app. If you no longer have your recovery codes, contact your Deskwoot account administrator for assistance with resetting your authentication settings.

Frequently Asked Questions

Is two-factor authentication required for all users?

By default, 2FA is optional. However, account administrators may choose to enforce it across the team for stronger security. Check with your admin to see if a policy is in place.

Which authenticator apps are compatible?

Any standard TOTP (Time-based One-Time Password) authenticator app should work, including Google Authenticator, Authy, Microsoft Authenticator, and 1Password.

Can I disable 2FA after enabling it?

Yes. Go to Profile Settings > Security and select the option to disable two-factor authentication. You will need to verify your identity before the change takes effect. Keep in mind that disabling 2FA reduces your account security, so it is recommended only when switching to a new device or app.