With two-factor authentication you log in with your password and a six-digit code from an authenticator app on your phone. If someone gets hold of your password, they still cannot log in without your phone. You switch it on yourself, and an administrator can make it mandatory for everyone in the company. Two-factor authentication is included in every plan.
Switching it on yourself
You need an authenticator app on your phone.
- Go to Mijn account → Mijn gegevens (My account → My details) and find the section Tweestapsverificatie (Two-factor authentication).
- Click Tweestapsverificatie instellen (Set up two-factor authentication).
- Scan the QR code with your authenticator app.
- Enter the code the app shows to confirm.
- Store the recovery codes in a safe place, for example in a password manager.
From now on Beamcore asks for the code from the app after your password. A code is valid for a short time and only works once.
Recovery codes
If you lose your phone, you log in with a recovery code instead of the code from the app. Each recovery code only works once. If you are running out of codes, or think someone has seen them, create new recovery codes in the same section on Mijn gegevens (My details).
You also switch it off there. You do not see that button if two-factor authentication is mandatory in your company.
Making it mandatory for your company
- Go to Bedrijf → Bedrijfsinstellingen (Company → Company settings) and open the tab Bedrijfsgegevens (Company details).
- In the section Beveiliging (Security), switch on Tweestapsverificatie verplicht voor alle gebruikers van dit bedrijf (Two-factor authentication mandatory for all users of this company).
- Click Beveiliging opslaan (Save security).
The owner can do this, or anyone allowed to change the company settings. Anyone who has not set up two-factor authentication yet is sent to set it up on the next page they open in the portal. Customers and contractors with a login in your company are included too. If you switch it off again, users choose for themselves.
Logging in to the app
If you have two-factor authentication switched on, the mobile app also asks for the code from your authenticator app or a recovery code when you log in. After a few wrong codes you have to wait a moment before you can try again.