Skip to main content

Two Factor Authentication (2FA)

Overview​

Two factor authentication, also known as 2FA, is an additional layer of security to protect your ChargeOver account from malicious attacks.

Think of your password as the first layer of security. Most of us think that a strong password is all we need, but passwords can pose a lot of risk to exposing yourself to malicious attacks. Things like reusing passwords, downloading something from the internet, or opening links in emails can expose your password to anyone trying to take advantage of you. 2FA can help keep those bad guys out, even if they've managed to get your password.

It's scary to think about, but imagine losing access to EVERYTHING in your ChargeOver instance because someone was able to log in with your stolen password and make changes to your account that prevent you from ever accessing it again. Not only that, but your customers data as well. If you want to prevent this from happening, 2FA is one of the best security options you can use to your advantage.

How does 2FA work?​

2FA works by providing you with a limited, one-time use token to log in to your ChargeOver account. Once you've entered your email and password, you will be prompted to enter your one-time password, also referred to as a token. You will obtain a token by using an app like Authy or Google Authenticator. Once you enter the token, you're logged in and ready to go!

Enable two-factor authentication (2FA)​

Two factor authentication, also known as 2FA, is an additional layer of security to protect your ChargeOver account from malicious attacks.

Before we get started in ChargeOver, you will want to make sure you have an 2FA app setup.

2FA provider recommendations​

In ChargeOver​

  1. Go to your Settings
  2. Select Integration, then More Integrations
  3. From the list of integrations, locate [2-Factor Authentication] and select Get Started

  1. Under 2-Factor Authentication Configuration, change the box to Yes
  2. Once you do that, we will reveal your secret token & a QR code. Using your preferred 2FA app, enter your secure token OR scan the QR code, and follow the prompts in the 2FA app

  1. Once ChargeOver is set up in your authenticator app, come back to ChargeOver and enter your one-time password or token and hit save
  2. A success message will appear if set up was successful

Admin set up​

  1. After 2FA has been enabled, when an admin logs in next they will be prompted to set up their 2FA

  1. When 2FA is successfully setup, a success message will confirm on the dashboard

I lost my 2FA/MFA device, and cannot login​

Occasionally, you or one of your team members may lose your 2FA/MFA token. To reset the 2FA/MFA you will need to verify the users identity.

If someone else has administrator access to ChargeOver​

If you have an Admin you can contact...

  1. The Admin should delete the user from the ChargeOver account
  2. The user should be re-created and re-invited to the account. This will allow them to set a new password for MFA on their device

If you're still having trouble logging in​

If you do not have an Admin you can contact...

  1. Schedule a call with our support team to verify your identity. You can email us at support@chargeover.com to schedule a call.

Changing your 2FA device​

Users can change their authentication device at any time.

  1. Log in to ChargeOver
  2. Go to the top right corner of your screen and click on 'update profile'
  3. Click into the Security tab
  4. Click the button that allows you to change your 2FA keys
  • This will let you add additional 2FA devices or change 2FA devices at any time
warning

If you are thinking or are already sharing your user login with others, you will want to reconsider. According to PCI requirements, each user needs to have a separate username and password. By sharing a single username with two or more people, you will be out of compliance with PCI regulations enforced by Visa, Mastercard, and others.

Alternatively, you can generate the same 2FA 6-digit codes on two separate devices. You can do this by entering the same 2FA setup key on both devices. Follow the same steps above except instead of clicking the button to change your 2FA keys, you will click the Manage saved two-factor authentication devices button instead.

Other resources​