Introduction to account security
This article provides an overview of 2-factor authentication, how to configure it within your GoCardless account, the recovery process, as well as answers to some of the commonly asked questions.
-
What is 2-factor authentication?
-
Why should you use 2-factor authentication?
-
What options do you have?
-
What is an authenticator app?
What is 2-factor authentication?
2-factor authentication, also known as Multi-Factor Authentication (MFA) or two step verification, enables GoCardless to identify who the user is by using something you know (your password) and something that you have (either a code from an authenticator app or SMS code we send to your phone).
This enables us to verify it is you who is logging in to your user account and access GoCardless. It is really important that you do not share your account login credentials with anyone.
Why should you use 2-factor authentication?
Passwords are a layer of security, but they are the bare minimum. They can be guessed or stolen if you’re a victim of a cyber attack, so 2-factor authentication offers an additional layer of security to make sure your account is still protected.
What options do you have?
You can choose two methods:
-
Use your mobile phone to receive an SMS.
-
Use an authenticator app to generate a unique time-based code.
You will need one of these two methods when you set it up for the first time and every time that you need to verify your identity. We recommend using an authenticator app, they are considered safer because the codes generated by them expire very quickly and it’s something you already have on your phone rather than something you’re sent like an SMS, which could be intercepted by a cyber attacker.
What is an authenticator app?
An authenticator app is an app that you can download on your mobile phone that generates a unique, time-based code that you can use to verify your identity when you log in to a website or application. An example of an authenticator app we recommend is Google Authenticator. Another option is using a password manager like 1Password , which also offers this functionality.
Within the Account Security section, you will also find the following articles:
Keeping your account secure
This article provides you with three simple steps to keep your account secure.
Disable 2-factor authentication
This article explains how to disable 2-factor authentication on your account
Recover your account
This article provides you with information on how to recover your account if you are unable to access it.
Account security FAQs
This article covers the most frequently asked questions about account security
Update password and/or log in details
This article shows you how to update your password and/or log-in details.
Forgotten password
This article explains how you can reset the password for your account.