Account security - 2FA

Account security settings are under Account → Security in your installation.

Two-factor authentication (2FA)

AppArch uses TOTP-based 2FA (Google Authenticator, 1Password, Authy, etc.).

Note

On on-prem installations the operator can switch two-factor off for the whole installation. When it is off, this section does not appear and sign-in never asks for a second factor - if you cannot find it, ask your administrator rather than searching harder.

1. Security → Two-factor authentication → Enable.
2. Scan the displayed QR code with your app.
3. Enter the 6-digit code from the app and press Confirm.
4. Save your recovery codes somewhere safe (shown only once).

After enabling it, sign-in asks for a 6-digit code or a recovery code following your password.

Directory (LDAP) accounts

If your account signs in through your organisation’s directory, its password lives in the directory - the password form is replaced by a note saying so, and the API refuses a change regardless. Your IT team changes it where it actually lives.

Recovery codes

If you lose access to your phone, you can sign in with one of your recovery codes. You can generate a new set with Security → Recovery codes → Regenerate; the old set becomes invalid.