Two-Factor Authentication
https://sec-cam.timeline.is/help/general/two-factor-authentication
Table of Contents

Two-Factor Authentication

Two-factor authentication (2FA) adds an extra layer of security by requiring a code from your mobile phone when you sign in. It works alongside a strong password: the password is your first layer, 2FA is the second. Start by making sure your password is strong.


Password Requirements

TetherX checks the strength of every new password before accepting it. A password that is too easy to guess is rejected, and you will be asked to choose a stronger one.

What makes a valid password

  • At least 8 characters, and longer is always better. Length is the single biggest factor: a 12 character password is far harder to crack than an 8 character one.
  • Mix character types. Combining lower case, upper case, numbers and symbols (for example !@#$%^&*?_~-) raises the strength quickly. A password mixing letters with numbers, or letters with symbols, comfortably clears the bar.

A short password made only of letters, or only of numbers, is usually rejected as too weak even if it looks random.

What gets rejected

  • Common passwords. Well known choices such as password, letmein, qwerty or 123456 are on a blocklist and will never be accepted.
  • A single repeated character, such as aaaaaa or 111111.
  • Your email address, or a recognisable part of it, weakens the password sharply. A password that is your email is rejected.
  • Sequences like abc or 123, and repeated runs like abcabc, both count against the score.

Examples

Password Result Why
sunny Rejected Too short, letters only
password1 Rejected Based on a common password
Coffee7Rain! Accepted Long, mixes upper, lower, a number and a symbol
blue-River-42-lamp Accepted Long passphrase with mixed characters

A good habit is to string together a few unrelated words with numbers or symbols between them: easy for you to remember, hard for anyone else to guess.


How It Works

When 2FA is enabled, you'll need:

  1. Your email and password (something you know)
  2. A code from your authenticator app (something you have)

Even if someone obtains your password, they still need to unlock your phone and open your authenticator app to get in.


Setting Up 2FA

Requirements

  • A smartphone with an authenticator app (Google Authenticator, Microsoft Authenticator, Authy, 1Password, or any TOTP-compatible app)
  • Your current TetherX password

Steps

  1. Click your profile icon in the top right corner → Security tab
    • Profile icon in navigation bar
  2. Select Authenticator App from the Two-Factor Authentication dropdown
    • Two-Factor Authentication dropdown showing Authenticator App option
  3. Enter your current password and click Update User
  4. Scan the QR code with your authenticator app (or manually enter the setup key)
  5. Enter the 6-digit code shown in your app to verify setup

Warning: Regular users cannot disable 2FA once enabled - this prevents attackers from turning it off. Administrators, integrators, and staff can disable their own 2FA (requires password) or reset it for other users.


Signing In with 2FA

After entering your email and password, you'll be prompted for a verification code:

  1. Open your authenticator app
  2. Find the entry for TetherX
  3. Enter the 6-digit code (codes refresh every 30 seconds)
  4. Click Verify

Tip: Codes are time-sensitive. If codes aren't working, ensure your phone's clock is set to automatic.


Lost Access to your Authenticator

If you lose access to your authenticator app (lost phone, app deleted, or device reset), contact your administrator to reset your 2FA settings. If you are the administrator, contact your integrator or Support.


Managing 2FA for Other Users

Administrators and integrators can enable or disable 2FA for other users.

Enabling 2FA

  1. Go to Users → select the user → Security tab
  2. Select Authenticator App from the dropdown
  3. Click Update User

The user will be signed out of all active sessions and required to complete 2FA setup on their next login.

Disabling 2FA

  1. Go to Users → select the user → Security tab
  2. Select None from the Two-Factor Authentication dropdown
  3. Click Update User

2FA is disabled immediately. Use this to help users who have lost access to their authenticator app.