Two Factor Password Security (A guide)

Setting Up Two-Factor Password Authentication

Two-Factor Password Authentication (2FA) adds an extra layer of security to your Distributary accounts, significantly reducing the risk of unauthorized access. Here's a step-by-step guide to enable 2FA on our website, please reach out to support@distributary.io if you would like to require this at a firm level.

Step-by-Step Instructions:

1. Log in to your account: Access your account using your existing credentials here

2. Navigate to Account Settings: Go to the hamburger menu in the top left of your account and click the profile button(highlighted in green below to launch your Account management screen:

   

3. Select Two-Factor Authentication: Expand the "Password & Authentication" Dropdown and click "ADD" under the "Multi-Factor Authentication" option:

   

   Authenticator App: Currently we offer only authenticator applications like Google Authenticator or Authy as they are more secure than SMS or Email only authentification.

4. Enable 2FA: Follow the steps and remember you'll be required to re-enter your account password.
   1. Verify Your Device: Open your chosen authenticator app and scan the QR code provided on the website to link your account.
   2. Secure Key & Backup Codes: Save these codes securely, as they can be used to log in if you lose access to your 2FA method.
5. Test 2FA Setup: Log out and log back in to verify that your 2FA setup is working correctly.

The Importance of 2FA for Accounts Containing Personally Identifying Information (PII):

1. Enhanced Security: 2FA adds a layer of protection beyond just passwords, making it significantly harder for attackers to gain unauthorized access.
2. Protects PII: Personally identifying information, like social security numbers, addresses, and financial data, is highly sensitive and valuable. 2FA helps safeguard this critical data.
3. Mitigates Password Vulnerabilities: Many users reuse passwords across multiple accounts, increasing the risk of a security breach. 2FA mitigates the consequences of password vulnerabilities.
4. Reduces Account Takeovers: With 2FA, even if a password is compromised, an attacker still needs the second factor to gain access, reducing the risk of account takeovers.
5. Compliance Requirements: Depending on your location or industry, data protection regulations may mandate the use of 2FA for certain types of accounts.

We encourage that our users avoid sharing backup codes and to enable 2FA wherever possible to protect their accounts and sensitive information.