Set up Two-Factor Authentication
Learn what is two-factor authentication and how to set it up
Two-factor authentication is an extra layer of security for your CSP account (available for both staff and client users) designed to ensure that you're the only person who can access your account, even if someone knows your password.
The feature is optional, but we strongly recommend that you activate 2FA to enhance the security of your account.
How does it work?
You'll still use your email address and password to sign in to your CSP account.
Then a time-sensitive randomly generated password, also known as a One-Time Password (OTP), will be sent to you upon log in to the platform. You will need to enter this code to verify that it's you.
There are two ways to get this code:
- via SMS — the code would be sent to your mobile phone via text message.
- via email — the code would be sent to the email address linked to your CSP account.
Getting Started with Two-Factor Authentication
You can enable or disable 2FA from the 'Two-Factor Setup' section of the 'My Profile' page.
It is possible to get to the 'My Profile' page by selecting the corresponding option in the left navigation menu (see pic. below) or by clicking on the profile picture in the top bar.
You can also access this section by clicking the ‘ENABLE 2FA NOW’ button in the ‘Activate Two-Factor Authentication’ popup while logging in to the platform (learn more below).
‘Activate Two-Factor Authentication’ popup
When you log in to the platform, you will see the following ‘Activate Two-Factor Authentication’ popup shown to users who don’t have 2FA enabled (see pic. below).
Here, you can:
-
Activate the Two-Factor Authentication by clicking the ‘ENABLE 2FA NOW’ button. Upon pressing the button, you will log in to the platform and will be redirected to the ‘Two-Factor Setup’ section of the ‘My Profile’ page where you can enable the Two-Factor Authentication.
-
Skip 2FA activation by clicking the ‘LATER’ button. Upon pressing the button, you will log in to the platform and land on the Dashboard. If the user doesn’t set 2FA within 15 days after clicking the LATER button, the ‘Activate Two-Factor Authentication’ popup would show up again.
Adding and verifying phone number(s)
Two-Factor Authentication will use your verified email and verified phone number(s) for sending a One-Time Password (OTP). That is why it’s important to add and verify your mobile number before activating 2FA.
Add a Phone Number:
- Refer to the ‘Phone Numbers' section of the ‘My Profile’ page and click on the ‘+ Add Phone Number’ button.
- In the opened ‘Add Phone Number’ pop-up, enter the number of the phone you want to add, click the ‘VERIFY’ button.
- The system will send you a text message with a 4-digit verification code on the provided number. You will need to enter this code and click on the ‘VERIFY’ button.
After this, your phone number will be displayed in the ‘Phone Numbers’ section and have a ‘Verified’ text close to it. If you wish to add a second phone number, repeat steps 1-3 above. Only two phone numbers can be added to the account.
Set up two-factor authentication
Once you have a Phone Number(s) added to your Profile, you can proceed and activate the Two-Factor Authentication by turning on the switch under the ‘Two-Factor Setup’ section (see pic. below).
In an opened popup window, you will be prompt to select a preferred method for receiving One-Time Password (OTP) upon the login, this can be your phone number or email id.
You can always change the primary method for receiving OTP in the ‘2FA Methods’ subsection on the ‘My Profile’ page by clicking on the ‘Set as Primary’ button on the preferred login method.
Trusted browser
Whenever you sign in with a new device or browser, you'll need to enter an OTP code. If you don't want to enter a code every time you log in to CSP, click the ‘TRUST’ button in the ‘Trust this browser’ popup as you sign in (see pic. below).
CSP will remember this browser, and you won't be asked for a verification code (OTP) for the next 30 days.
Note, this option works only when you log in with the same device and browser you were using when you selected ‘TRUST’ in the ‘Trust this browser?' popup.
Don't have access to your phone number/email address while trying to log in?
Click ‘Try another way’ on the 2FA sign-in window displayed upon login and select another option to select another 2FA method and complete your authentication.
If you still can't access your account, please contact us.
Updated almost 3 years ago