Enabling Two Factor Authentication (2FA) for your account

1. Before You Start
2. How it Works
3. Setup Instructions: RoboForm Extension

 

Before You Start

Two Factor Authentication (2FA) is available for RoboForm Premium accounts. 2FA options include Google Authenticator, Authy, Microsoft Authenticator and other time-based one-time password (TOTP) authenticator apps.

For instructions on enabling 2FA using Google Authenticator, please follow the steps listed below (the steps for other TOTP based apps are similar). 

Install your favorite TOTP Authenticator app. 

NOTE: You will always need access to your authenticator app.

 

How It Works

Two-factor authentication requires two forms of identification to gain access to an account. With two-factor authentication enabled in RoboForm, you need your RoboForm login credentials and a passcode to access your account.

The passcode is generated from two pieces of information: one permanent and one random. The permanent, unique piece (a QR code or secret key) is stored in RoboForm and on your device when you set up two-factor authentication. RoboForm and Google Authenticator then use this code in combination with another constantly changing value to generate your temporary six-digit passcode that you'll use to log in to RoboForm. If the passcodes in RoboForm and the Google Authenticator app are the same, you're granted access to your account. 

 

What should I do if I lose access to my authenticator app?

If you lose access to your authenticator app, when you are prompted for a 2FA code click the "Send OTP by Email" button on the prompt. RoboForm will send you a One Time Password to your email, which you can use to log in.

 

How do I change the authentication method for my account?

If you have access to your RoboForm account, click here for our tutorial on changing your authentication method.

If you do not have access to the email, phone number, or authenticator app associated with your RoboForm account, please contact us by submitting a support ticket.

 

Setup Instructions: RoboForm Extension

1) Open your browser and click the RoboForm extension icon. Click the 3 dots in the upper right corner. Select "Settings" from the menu.

 

2) In the Settings menu, select "Security" from the column on the left. In the "Two-factor authentication" section, select Google Authenticator.

 

3) RoboForm may prompt you to verify your email address. Obtain the code sent to your email account and enter it in the designated field.

 

4) Using the device with the authenticator app installed, open the camera and scan the QR code or manually enter the secret key into your Google Authenticator app.

 

5) After scanning or entering the secret key, the authenticator app will present you with a six-digit numeric code.

 

6) Enter this code into RoboForm where it says "Enter OTP from Google Authenticator App."

 

7) You have now enabled 2FA.

 

Moving forward, when accessing your RoboForm account from a new device, a One Time Password will be sent to your Google Authenticator app. You must successfully enter this six-digit numeric code into RoboForm to complete the authorization of that device before you can access your account.

While we strongly recommend using 2FA to protect your account data, if you wish to turn this security feature off, you can do so by going back to RoboForm's settings, selecting the Security tab, and checking the "Off" option under Two-factor authentication.