Two-Factor Authentication (2FA)

Two-factor authentication (2FA) asks for a 6-digit code after the password, so a stolen password alone isn’t enough to sign in. You can require it for your team and, separately, for your clients.

Overview

This guide covers 2FA for you and your team, for your clients, and for your own Clientish account, and what signing in with a code looks like.

Who Can Access

Only people who can change company settings can turn 2FA on or off. Everyone then enters a code when they sign in.

For You and Your Team

This covers you, your co-admins, your team members and remote members.

1. Open the 2FA settings

   Go to Settings → General → Access & white-label. Choose Email code, Google Authenticator, or both. With both, people can use either one at sign-in.

   

2. Turn on the email code

   On the Email code tab, turn on Require email verification code. A test email goes to your address first; if it can’t be sent, the switch stays off. Your mail server must be set up (see SMTP & Mail Config).

3. Or require Google Authenticator

   On the Google Authenticator tab, click Set up Google Authenticator, scan the QR code with the app, type the 6-digit code and click Confirm & link. Then turn on Require Google Authenticator. Everyone who signs in must link the app first; someone without it linked can’t sign in until an admin helps them.

   

4. Check your status on your profile

   Your Profile shows whether the email code and Google Authenticator are on for you. Manage opens the settings.

   

For Your Clients

1. Turn on 2FA for client logins

   Go to Settings → Account Statuses. In Security & Signup, turn on Enable two-factor authentication and click Save Security Settings.

   

   Clients then get a code by email after their password. It needs your mail server: if the code can’t be emailed, the client is asked to contact you.

For Your Own Clientish Account

In the Clientish Portal (profile menu → Portal manage), open Profile and turn on Two-Factor Authentication. You then get a code by email when you sign in there.

Signing In With a Code

• After your password, the Two-Factor Authentication screen asks for your code. Type it and click Verify Code.
• If both methods are on, choose Email code or Authenticator at the top.
• An email code has 6 digits and works for 10 minutes. The email is called “Your Clientish verification code”.
• After 3 wrong codes, go back to the sign-in page and sign in again for a new code.

Frequently Asked Questions