Multi-factor authentication

It's recommended that registered Hub customers securely log in using multi-factor authentication (MFA). There are two ways to authenticate your Hub account: a third-party authenticator app such as Google Authenticator, or by providing a Security key. Each method requires different configuration settings, which are explained below.

To remove MFA, refer to Removing multi-factor authentication.

Note

This process is only for users that log in to the Hub with an email address and password. Anyone that uses a third-party identity provider to log in to their account must manage MFA directly with their provider.

---

Adding multi-factor authentication

Begin by adding MFA to your user account:

1. Log in to the Hub.
2. Select your account.
3. Click My Details from the user menu in the top-right.
4. Click the Email & Password tab from the sidebar on the left.
5. Click the + icon next to Multi-factor authentication.
6. Click Get started.
7. You will receive an email with a link. To continue, click the Set up button in the email.

8. Choose the authenticator app you want to use, and follow the relevant instructions below:

   1. Authenticator.
   2. Security key.

   Note

   MFA is applied at the user level, and does not need to be set-up for each account individually.

---

Use an authenticator app

Use an app such as Google Authenticator to generate verification codes for more protection when you log in to your Hub account. This method requires a smartphone. Follow these steps for authentication:

1. Click Google Authenticator or similar.
2. Scan the QR code with your chosen authenticator app.
3. Enter the one-time code from your app into the box, and click Continue.
4. Save your recovery code somewhere safe, you will need this code if you ever need to log in without the authenticator app. Confirm you have saved it, and click Continue.
5. If your device supports fingerprint or face recognition you'll be prompted to enable this option to log in faster. Either click Continue, and follow the prompts to enable or Not now to continue without.
6. Close the window, and log back in to the Hub.

---

Authenticating with a security key

Use a device as a security key to authenticate your Hub account. Follow these steps for authentication:

1. Click the Security Key button.
2. Click Use Security Key.
3. Select either Add a new Android phone or USB security key.
4. If you use an Android phone:
   1. Scan the QR code with a QR scanner app on your phone.
   2. Open the URL provided.
   3. Allow the QR code connection.
   4. Use your phone's biometrics to authenticate.
   5. Back on your device give the security key a name, and click Continue to complete the setup.
5. If you use a USB security key:
   1. Insert your security key into your device, and touch it.
   2. Name your security key, and click Continue to complete the setup.

---

Removing multi-factor authentication

Follow these steps to disable MFA:

1. Log in to the Hub.
2. Select your account.
3. Click My Details from the user menu in the top-right.
4. Click the Email & Password tab from the sidebar on the left.
5. Click the bin icon next to multi-factor authentication.
6. Confirm by clicking the Yes, turn off button to remove MFA.