Two-Factor Authentication (2FA) methods available
You can access to the Two-Factor Authentication (2FA) set up going in menu My Account -> Two-Factor Auth.
The following methods are supported, you can learn more on these options in the next section:
- Code by Email
- Authenticator app
- Yubikey
What Is Two-Factor Authentication (2FA)?
The Two-Factor Authentication (2FA) is an extra layer of security used to make sure that when you try to gain access to your Trade Copier account we are sure that you are who you say you are. First, you will enter your username and password. Then, instead of immediately gaining access to your account, you will be required to provide another piece of information.
This 2FA is optional but we highly recommend to use it in order to add an additional level of security.
Code by Email
You can set up the Two-Factor Authentication (2FA) to receive a 6-digit code by email, this means that at every logging you will receive a code by email and be prompted to enter it in order to login to your cockpit.
For this please go in menu "My Account -> Two-Factor Auth" and then click on "Add a new Code by Email".
A new window will be prompted, you can indicate a friendly title for this 2FA method (you will see it when logging in so don't put any secrets in it). Then you have to indicate if this should be the default 2FA when you log in to the site, we recommend to tick this option. In the meantime, you should have received an email to the email address registered in your profile (please verify that your email address is correct in "MyAccount -> My Profile"), you are now prompted to enter the 6-digit code to validate this and to confirm.
You can edit or cancel this 2FA at anytime, just go in menu "My Account -> Two-Factor Auth".
You can also "Turn Off" the 2FA, for this first you have to remove the 2FA "Code by Email" clicking on the trash in red.
Authenticator App
You can set up the Two-Factor Authentication (2FA) using the Google Auth that use a 6-digit code generated by an app every 30 seconds, this means that at every logging you will have to enter a code provided by an app that has been downloaded previously and you will be prompted to enter it or to scan a QR code in order to login to your cockpit.
For this please go in menu "My Account -> Two-Factor Auth" and then click on "Add a new Authenticator App".
A new window will be prompted, you can indicate a friendly title for this 2FA method (you will see it when logging in so don't put any secrets in it). Then you have to indicate if this should be the default 2FA when you log in to the site, we recommend to tick this option.
First you will have to set up authenticator app using the key or the QR shown. Learn here how to set up the app: https://support.google.com/accounts/answer/1066447?hl=en
Check the link here to learn how to use the Google 2FA Verification: https://support.google.com/accounts/topic/2954345?hl=en&ref_topic=7667090
You can edit or cancel this 2FA at anytime, just go in menu "My Account -> Two-Factor Auth". You can also "Turn Off" the 2FA, for this first you have to remove the 2FA "Authenticator App" clicking on the trash in red.
Yubikey
You can set up the Two-Factor Authentication (2FA) to use YubiKey, a hardware secure token, this means that at every logging you will receive a code on your YubiKey and be prompted to enter it in order to login to your cockpit.
You can learn more on YubiKey on their website here: https://www.yubico.com/
For this please go in menu "My Account -> Two-Factor Auth" and then click on "Add a new YubiKey".
A new window will be prompted, you can indicate a friendly title for this 2FA method (you will see it when logging in so don't put any secrets in it). Then you have to indicate if this should be the default 2FA when you log in to the site, we recommend to tick this option. In the meantime, you should have received an code on your YubiKey, you are now prompted to enter the code to validate this and to confirm. The first twelve characters, which are the unique identification code for your YubiKey, will be saved.
You can edit or cancel this 2FA at anytime, just go in menu "My Account -> Two-Factor Auth". You can also "Turn Off" the 2FA, for this first you have to remove the 2FA "YubiKey" clicking on the trash in red.
Backup Codes
Backup Codes could be used in case of emergency access if you get locked out. Each of the listed codes can be used only once, you can use them in case of emergency, when none of the other Two Factor Authentication methods you've set up can be used. For example, if your phone is out of battery or misplaced.
For this please go in menu "My Account -> Two-Factor Auth" and then click on "Print these codes" in the "Backup Codes" section.
A new window will be prompted, just print/copy these listed codes in a secure place.
We recommend you to generate a new set of backup codes regularly to avoid any abuse or if you think your backup codes are compromised, e.g. someone got hold of a printout with them, or if you are running low on available backup codes.