Two-factor authentication (also known as 2FA, 2-step verification, or 2-phase authentication) is a way of adding additional security to your account. 2FA requires you to enter an extra code when you log in or perform some account-sensitive action. The code is generated from an application on your computer or mobile phone.
Setting up 2FA
To enable 2FA for your account you will need an application that manages 2FA codes, such as Google Authenticator. You can install it here:
Enabling 2FA
Go to My Account and click on Enable Two-Factor Authentication.
The wizard will generate a QR code.
You need to scan this code with your 2FA application, then type the code your 2FA application shows. Once completed successfully, 2FA will be active on your account.
Tip: cloudHQ does not provide backup codes. To avoid being locked out when you change or lose your phone, use an authenticator app that backs up your codes to your account (for example Google Authenticator with Google account sync), or keep the setup key shown next to the QR code in a safe place.
Signing in with 2FA
When you have 2FA turned on for your account, cloudHQ will ask you for a 2FA code in the following cases:
- Logging in to cloudHQ
- Disabling 2FA on your account
In each of these cases, you’ll be presented with the following screen prompting the 6-digit code from your app.
Managing/removing 2FA
If you want to disable 2FA for your account, go to the My Account page again and click the Disable Two-Factor Authentication button. cloudHQ will ask you for the 6-digit code from your authenticator app.
I lost my authenticator app or device
If you are changing phones and the old one still works: you can move your codes to the new phone instead of resetting 2FA: How to transfer Google Authenticator 2FA to a new mobile phone.
If your old device still works: open the authenticator app, read the current 6-digit code, sign in to cloudHQ and click Disable Two-Factor Authentication on the My Account page. Then enable it again with your new device.
If you cannot get a code: email support@cloudhq.net from the email address of your cloudHQ account. We will not turn 2FA off until we are sure the account is yours, so we may ask you for details about the account, such as the apps you use, your plan, your payment details and when you last signed in. Never send a full card number or a security code. After we verify the account we turn 2FA off and let you know.
After 2FA is turned off:
- Clear your browser cookies.
- Sign in to Google with your cloudHQ account email.
- Click Login on cloudHQ and sign in with that email.
Then enable 2FA again under My Account (Enable Two-Factor Authentication) and scan the new QR code.
My code is not accepted
Authenticator codes depend on the clock of your phone. Turn on automatic date and time, and use the time-correction option in your authenticator app if it has one. After too many wrong codes the account is locked and you need to email support@cloudhq.net.
two-step authentication; two phase authentication; 2 step verification; multi factor authentication