Two-Factor Authentication

Two-Factor Authentication

Two-factor authentication (2FA/MFA) adds an extra layer of security to your NEURO account by requiring a second form of verification beyond your password.

Why Use 2FA?

Benefits of two-factor authentication:

• Protects against password theft
• Prevents unauthorized access
• Required for many compliance standards
• Industry security best practice

Setting Up 2FA

Requirements

You’ll need one of:

• Authenticator app (recommended)
• Hardware security key (FIDO2)

Authenticator App Setup

Step 1: Start Setup

1. Go to Settings → Security
2. Find Two-Factor Authentication
3. Click Enable 2FA

Step 2: Install Authenticator

Install an authenticator app if you haven’t:

App	Platforms
Google Authenticator	iOS, Android
Microsoft Authenticator	iOS, Android
Authy	iOS, Android, Desktop
1Password	iOS, Android, Mac, Windows

Step 3: Scan QR Code

1. Open authenticator app
2. Tap + or Add Account
3. Scan the QR code displayed in NEURO
4. Account appears in your app

Step 4: Verify Setup

1. Enter the 6-digit code from your app
2. Click Verify
3. 2FA is now enabled

Step 5: Save Backup Codes

Caution

Save your backup codes securely. They’re your only way to recover access if you lose your authenticator.

1. Copy or download backup codes
2. Store in a secure location:
   • Password manager
   • Secure note
   • Printed in safe location
3. Confirm you’ve saved them

Using 2FA

Logging In

With 2FA enabled:

1. Enter email and password
2. When prompted, open authenticator app
3. Enter the current 6-digit code
4. Click Verify
5. Access granted

Code Timing

• Codes change every 30 seconds
• Use the current code shown
• If code is about to expire, wait for next one

Managing 2FA

View Status

Check your 2FA status:

1. Go to Settings → Security
2. See Two-Factor Authentication section
3. Status shows: Enabled/Disabled

Regenerate Backup Codes

If you’ve used backup codes:

1. Go to Security settings
2. Click Regenerate Backup Codes
3. Old codes are invalidated
4. Save new codes securely

Change Authenticator App

To switch to a new app/device:

1. Disable 2FA (requires current code)
2. Re-enable 2FA
3. Scan QR with new app
4. Verify and save new backup codes

Disable 2FA

Note

Your organization may require 2FA. Check with your administrator before disabling.

1. Go to Security settings
2. Click Disable 2FA
3. Enter current authenticator code
4. Confirm disabling

Recovery Options

Lost Authenticator Access

If you can’t access your authenticator:

Use Backup Code

1. On login screen, click Use backup code
2. Enter one of your saved backup codes
3. Each code works only once
4. Set up new authenticator after login

Contact Administrator

If you have no backup codes:

1. Contact your NEURO administrator
2. They can reset your 2FA
3. You’ll need to verify identity
4. Set up 2FA again after reset

New Phone/Device

When getting a new phone:

Option 1: Transfer (if supported)

• Some apps support account transfer
• Check your authenticator app’s documentation

Option 2: Re-setup

1. Log in using backup code
2. Disable 2FA
3. Re-enable with new device
4. Save new backup codes

Hardware Security Keys

Supported Keys

NEURO supports FIDO2/WebAuthn keys:

• YubiKey 5 series
• Google Titan Key
• Other FIDO2 keys

Setting Up a Security Key

1. Go to Security settings
2. Click Add Security Key
3. Insert your key when prompted
4. Touch the key to register
5. Name your key
6. Key is now registered

Using Security Keys

1. Enter email and password
2. When prompted, insert key
3. Touch the key
4. Access granted

Multiple Methods

You can have both:

• Authenticator app
• Hardware key

Use either method to log in.

Best Practices

Do

• • Enable 2FA on all accounts
• • Store backup codes securely
• • Use authenticator app over SMS
• • Register multiple methods if possible
• • Keep authenticator app updated

Don’t

• • Share backup codes
• • Screenshot backup codes on phone
• • Disable 2FA for convenience
• • Ignore prompts to set up 2FA

Troubleshooting

Code Not Working

• Check your device time is correct
• Ensure time zone is set properly
• Try the next code if current expires
• Verify correct account in authenticator

Lost All Access

Contact your administrator with:

• Your account email
• Verification of identity
• Explanation of situation

---

Next: Learn about Keyboard Shortcuts