Enabling Two Factor Authentication (2FA) for your account

1. Before You Start
2. How it Works
3. Setup Instructions: RoboForm Extension
4. Setup Instructions: RoboForm Online

 

Before You Start

Two Factor Authentication (2FA) is available for RoboForm Everywhere accounts. 2FA options include Google Authenticator, Authy, Microsoft Authenticator and other time-based one-time password (TOTP) authenticator apps.

For instructions on enabling 2FA using Google Authenticator, please follow the steps listed below (the steps for other TOTP based apps are similar). 

Install your favorite TOTP Authenticator app. 

NOTE: You will always need access to your authenticator app.

 

How It Works

Two-factor authentication requires two forms of identification to gain access to an account. With two-factor authentication enabled in RoboForm, you need your RoboForm login credentials and a passcode to access your account.

The passcode is generated from two pieces of information: one permanent and one random. The permanent, unique piece (a QR code or secret key) is stored in RoboForm and on your device when you set up two-factor authentication. RoboForm and Google Authenticator then use this code in combination with another constantly changing value to generate your temporary six-digit passcode that you'll use to log in to RoboForm. If the passcodes in RoboForm and the Google Authenticator app are the same, you're granted access to your account. 

 

Setup Instructions: RoboForm Extension

1) Open your browser and click the RoboForm extension icon. Click the 3 dots in the upper right corner. Select "Settings" from the menu.

 

2) In the Settings menu, select "Security" from the column on the left. In the "Two-factor authentication" section, select Google Authenticator.

 

3) RoboForm may prompt you to verify your email address. Obtain the code sent to your email account and enter it in the designated field.

 

4) Using the device with the authenticator app installed, open the camera and scan the QR code or manually enter the secret key into your Google Authenticator app.

 

5) After scanning or entering the secret key, the authenticator app will present you with a six-digit numeric code.

 

6) Enter this code into RoboForm where it says "Enter OTP from Google Authenticator App."

 

7) You have now enabled 2FA.

 

Moving forward, when accessing your RoboForm account from a new device, a One Time Password will be sent to your Google Authenticator app. You must successfully enter this six-digit numeric code into RoboForm to complete the authorization of that device before you can access your account.

While we strongly recommend using 2FA to protect your account data, if you wish to turn this security feature off, you can do so by going back to RoboForm's settings, selecting the Security tab, and checking the "Off" option under Two-factor authentication. 

 

Setup Instructions: RoboForm Online

1) Log into your RoboForm Online Account. 

 

2) Select the "My Settings" tab in the upper navigation bar and then select "Security" from the dropdown menu.

 

3) In the "One Time Password Option" section, under "Send the One Time Password via," select Google Authenticator.

 

4) Using the device with the authenticator app installed, open the camera and scan the QR code or manually enter the secret key into your Google Authenticator app.

 

5) After scanning or entering the secret key, the authenticator app will present you with a six-digit numeric code.

 

6) Enter this code into RoboForm where it says "Enter OTP from Google Authenticator App."

 

7) Upon successfully scanning or entering the secret key, RoboForm will present you with a window confirming that you have turned on 2FA.

 

Moving forward, when accessing your RoboForm account from a new device, a One Time Password will be sent to your Google Authenticator app. You must successfully enter this six-digit numeric code into RoboForm to complete the authorization of that device before you can access your account.

While we strongly recommend using 2FA to protect your account data, if you wish to turn off this security feature, you can do so by logging into your account, selecting the Security tab, and clicking the red "Turn OFF" button.