Two Factor Authentication
Two Factor Authentication (2FA) adds an additional layer of security for logging into your account. Enabling 2FA will require a one-time Verification Code received by SMS Text Message or an Authentication Token provided by the Authy (https://authy.com/) app on your iPhone or Android device each time you Log In.
Additionally, if you are the owner of your Zoey Store you can require every Staff Account that has access to your store to enable 2FA for their account.
Enable Two Factor Authentcation
To enable 2FA for your Zoey account, first go to your User page in the Zoey Admin which can be found in Team > User List. Once on the User List, click your User.
The User Information section will display whether 2FA is enabled for your account. If 2FA is disabled, click "Enable 2FA" to begin.
When the store owner has required 2FA for all accounts this step is not necessary. Users will automatically be prompted to setup 2FA the next time they log in.
SMS (Text Message) Two Factor Authentication
SMS is one of two Authentication Types that Zoey offers. Using SMS will send a text message containing a single use Verification Code to the provided phone number.
To use SMS, select SMS (Text Message) from the dropdown and enter your phone number. If your phone number does not use +1 as its international prefix, click the flag and select the correct prefix.
Click Save after completing the form.
After Saving, a text message will be sent to the provided number. Enter the code into the Verification Code field and click Complete Setup.
Remember this device
Checking Remember this device will allow you to log into your account without entering a verification code again for 30 days.
Once the code is verified you will see a Setup Completed message and can return to your Zoey Admin
Your User page in the Zoey Admin will now show that you have enabled Two Factor Authentication with SMS
Authy Two Factor Authentication
Authy (https://authy.com/) the other Authentication Type offered by Zoey. Authy is an app for your iPhone or Android device that will automatically generate a new Authentication Token every 30 seconds. When logging in, enter the Authentication Token from the Authy app for Zoey Admin Login
To use Authy, select Authy (Push Notification) from the dropdown and enter your phone number. If your phone number does not use +1 as its international prefix, click the flag and select the correct prefix.
Click Save after completing the form.
After Saving, a text message will be sent to the provided number with instructions on how to install the Authy app on your device. After Authy has been installed on your device, enter the Zoey Admin Login token generated in the Authy app.
Remember this device
Checking Remember this device will allow you to log into your account without entering an authentication token again for 30 days.
Setting up Authy on your Device
I already have Authy
If the Authy app is already installed on your device, the Zoey Admin Login account will automatically be added to the app for you.
Authy will send a text message to your device with instructions for installing the app.
Once the app is installed on your device, enter the same international code and phone number used in the Zoey form. This will prompt Authy to send you a registration code to turn your device into a secure token.
Enter the registration code sent by Authy
Once the registration code has been verified, Zoey Admin Login will now appear in the Authy app. Click the Zoey Admin Login box at the bottom of the screen and enter the token.
Multiple Authy Services
If the provided phone number is associated with any other Authy services there may be multiple boxes at the bottom of the screen to choose from. If multiple boxes are present click Zoey Admin Login to retrieve the correct token.
Once the code is verified you will see a Setup Completed message and can return to your Zoey Admin
Your User page in the Zoey Admin will now show that you have enabled Two Factor Authentication with Authy
Requiring Two Factor Authentication for all Staff Accounts
Two Factor Authentication must first be enabled on the store owner's account before staff accounts can be required to use 2FA.
Zoey allows for store owners to require two factor authentication for all accounts that have access to their store. To require 2FA for all accounts, go to your User page and click Manage 2FA Settings.
In the slide out drawer, select Yes for "Require 2FA for all users". Enter your current account password and click Save. This will force all users who do not have 2FA enabled to enable it on their next login.
Disabling Two Factor Authentication
Two Factor Authentication Required by Store Owner
2FA cannot be disabled for your account if a store owner for any store that you belong to requires it.
To disable Two Factor Authentcation for your account, go to your User page and click Manage 2FA Settings.
In the slide out drawer, change Authentication Method to Disable Two Factor Authentication, enter your current password, and click Save.
Updated about 1 year ago