How to Enable Two-Factor Authentication (2FA)

Why enable 2FA

Two-factor authentication (2FA) adds an extra layer of security to your LemRank account. If an unauthorized person obtains your password, they would still need access to your authenticator app to log in. This significantly reduces the risk of unauthorized access to your rank tracking data, reports, and billing information.

Supported authenticator apps

LemRank uses a time-based one-time password (TOTP) algorithm, which is an industry standard (RFC 6238). This means that any authenticator application that supports TOTP can be used with LemRank.

Common authenticator apps include:

• Google Authenticator
• Microsoft Authenticator
• Authy
• FreeOTP

The 3-step setup flow

Enabling 2FA involves three steps: scanning a QR code, entering a verification code, and saving backup codes.

Step 1: Scan the QR code

1. Log in to your LemRank account.
2. Navigate to your personal Settings by clicking your avatar in the top right corner.
3. On the Security tab, locate the "Two-Factor Authentication" section.
4. Click Enable 2FA.
5. A QR code will be displayed on the screen.
6. Open your chosen authenticator app on your mobile device.
7. Select the option to add a new account. This is often represented by a plus sign (+) or an "Add account" button within the app.
8. Use your authenticator app to scan the QR code displayed on your LemRank account settings page.
9. After scanning, your authenticator app will display a 6-digit code.

If you are unable to scan the QR code, most authenticator apps provide an option to manually enter a setup key. The setup key is a long alphanumeric string that appears below the QR code on the LemRank page.

Step 2: Verify the connection

1. After scanning the QR code and generating the first 6-digit code in your authenticator app, enter this code into the Verification Code field on the LemRank setup page.
2. Click Verify and Enable.

If the code is correct, 2FA will be enabled for your account. You will then be prompted to save your backup codes.

Step 3: Save backup codes

After successfully enabling 2FA, LemRank will generate a list of one-time backup codes. These codes are crucial for accessing your account if you lose access to your authenticator device.

1. On the backup codes screen, click Download codes to save them as a text file.
2. Alternatively, click Print codes to create a hard copy.
3. Store these backup codes in a secure location, such as a password manager, an encrypted drive, or a physical safe. Do not store them on your primary computer without encryption or in an easily accessible location. Each code can only be used once.

Backup codes — save them

Backup codes are single-use codes that allow you to log in to your LemRank account if you cannot access your authenticator app. This might occur if your phone is lost, stolen, or damaged.

Each backup code can be used only once. When you use a backup code to log in, it becomes invalid.

If you generate a new set of backup codes, all previously generated codes become invalid. It is recommended to download and securely store a new set of backup codes each time you enable, disable, or reconfigure 2FA on your account.

To generate new backup codes:

1. Log in to your LemRank account.
2. Navigate to your personal Settings by clicking your avatar in the top right corner.
3. On the Security tab, in the "Two-Factor Authentication" section, click Generate new backup codes.
4. You will be prompted to confirm your choice.
5. All previously generated codes will be invalidated. Download or print the new set of codes immediately.

Recovering a lost 2FA device

If you lose the device that hosts your authenticator app and do not have access to your backup codes, you will need to contact LemRank support to regain access to your account.

To initiate the recovery process:

1. Contact LemRank support through the official support channels.
2. You will be asked to verify your identity. This process may involve confirming details associated with your account, such as recent billing information, account creation date, or other verifiable data.
3. Once your identity is confirmed, LemRank support will disable 2FA on your account.
4. You will then be able to log in using only your password.
5. Immediately after logging in, navigate to your Security settings and re-enable 2FA following the 3-step setup flow described above. Remember to save your new backup codes in a secure place.

Enforcing 2FA org-wide (Business plans)

For accounts on Business or higher plans, workspace administrators have the option to enforce 2FA for all team members within their organization. This feature enhances the overall security posture of the entire team's access to LemRank data.

To enforce 2FA org-wide:

1. Log in to your LemRank account as a workspace administrator.
2. Navigate to Workspace Settings.
3. Select the Security tab.
4. Locate the "Two-Factor Authentication Enforcement" section.
5. Toggle the Enforce 2FA for all team members option to enable it.
6. Confirm your selection.

Once enabled, any team member who attempts to log in without 2FA already configured will be prompted to set it up before they can access the workspace. Team members will be guided through the standard 2FA setup flow upon their next login attempt.

Related

• How to reset your password