Two Factor-Authentication user guide
See our Two Factor-Authentication User Guide for detailed information on
- Using 2FA in your organisation
- Setting up 2FA, logging in and adding/deleting devices
Frequently asked questions
- Why are you only offering this service to registrars?
We plan to make the new service available to all of our customers as part of a phased rollout. Registrars are in phase one as they are generally the more frequent users of Online Services and manage large numbers of domains.
- Why did you choose the Google Authenticator app for this new security feature?
We looked at a variety of products and solutions for increasing the security when accessing Online Services. Google authenticator was chosen as it fared the best in terms of cost, security and usability. Google authenticator is available as an app for iOS (iPhone/iPad), Android and Blackberry, and as a plug-in for the Firefox browser. Microsoft has their own app for their Windows 8 devices. There is no cost to users to download the app or to implement two-factor authentication. Other web applications that use Google authenticator are Googlemail, Dropbox, Amazon, Facebook and Tumblr.
- Are you adding any IP address white-listing?
IP address white-listing was considered as an additional security feature to the existing password and passphrase. It involves a user providing a list of IP addresses that they will access Online Services from and all other IP addresses are then blocked. This method was rejected due to the complex administration required for users using multiple locations and IP addresses.