How to enable two-factor authentication in Pro?

Two-factor authentication (also known as two-step verification) is an optional but highly recommended security feature in a Pro-account. Once enabled, SpinOffice requires a six-digit security code in addition to your password when you sign in to your account.

Enable two-factor authentication

1. Sign in to SpinOffice.
2. Go to menu option Administration -> CRM preferences -> Security.
   (If you don't have the CRM preferences option in Admin menu, you don't have the user right to access this. Please ask the 'super administrator' within your database)
   
3. Tick 'Enable 2-factor authentication with Google Authenticator'.
4. To enable 2FA for mobile app access, tick 'Also enable for mobile app access'.
5. Click on 'Save' to close the preference screen.
6. Note: it is an adjustment that applies to everyone!
7. Two-step verification is now active on the next login for all users.

Download Google Authenticator App

Several mobile apps are available that will generate a unique time-sensitive security code but we advice you to use Google Authenticator to finish signing in to your SpinOffice account:

• Google Authenticator (available for Android/iPhone/BlackBerry)

Initial login to SpinOffice with two-step verification

Once you download the app, follow these steps to use the app for SpinOffice two-step verification:

1. Sign in to SpinOffice.
2. Enter your personal password (step 1).
3. A QR code is shown.
4. On your mobile phone, use the Google Authenticator App. Open the app and choose to add a new account.
5. Use your phone's camera to scan the QR code on the login screen of SpinOffice.
6. Enter the six-digit security code that the Google Authenticator app generates for you.
7. Click on 'Validate' to enter SpinOffice (step 2).

Recurrent logins to SpinOffice with two-step verification

1. Sign in to SpinOffice.
2. Enter your personal password.
3. Enter the verification code that is shown for SpinOffice in the Google Authenticator App.
4. Click on 'Validate' to enter SpinOffice.

As long as you have your phone/Google Authenticator App, you can switch computers to login to SpinOffice; after you have entered the account password the verification code is shown.

Need a new QR code?

When you have a new phone, you will have to reset the QR code.

1. Sign in to SpinOffice.
2. Enter your personal password.
3. Choose 'Reset QR by mail'. We will sent you an email with a link, please click on that link.
4. SpinOffice will show you a new QR code that you can scan with the Google Authenticator App.
5. Enter the new security code that the Google Authenticator app generates for you.
6. Click on 'Validate' to enter SpinOffice.

If you lose your phone and can't sign in with two-step verification, a colleagues with admin-rights can temporary turn off two-step verification for all users in the CRM preferences screen.

Important: When two-factor authentication is activated, you can no longer log in with the option 'remember password'. It is also important to realize that you can no longer log in to SpinOffice without having your phone nearby.