<a id="two-factor-authentication"></a>
<a id="id1"></a>
# Two Factor Authentication

For additional security users can enable Two Factor Authentication [https://en.wikipedia.org/wiki/Multi-factor_authentication](https://en.wikipedia.org/wiki/Multi-factor_authentication). TrialGrid supports One-Time-Password devices such as Google Authenticator and Microsoft Authenticator.

<a id="setting-up-two-factor-authentication"></a>
## Setting up Two Factor Authentication

To set up Two Factor Authentication:

- Log into TrialGrid using your username and password
- Click on your username at the top right and select 'Enable Two Factor Authentication'
- A wizard will now guide you through the setup steps
- When a QR code is displayed, scan the code using your Authenticator application and enter the 6-digit token it displays
- You should now have Two Factor Authentication enabled

<a id="logging-in-using-two-factor-authentication"></a>
## Logging in using Two Factor Authentication

To log into TrialGrid using Two Factor Authentication:

- Enter your TrialGrid username and password as usual
- You will be prompted to enter a token. Read the current token from your Authenticator application and enter it.
- You can choose to have your browser remember this code for 30 days. This applies only to the browser you are currently using. If you log in using a different machine or browser you will have to enter a valid token.

<a id="backup-codes"></a>
## Backup codes

You can create backup codes which you can use if you do not have access to the Authenticator application:

- Click on your username at the top right and select 'Two Factor Authentication'
- If it is more than 5 minutes since you logged in you will be prompted to enter your password again.
- A wizard will now guide you through the steps to create backup codes.
- You should keep a secure copy of the backup codes.
- Each backup code can only be used once.
- If you use all your backup codes you can generate a new set.

<a id="disabling-two-factor-authentication"></a>
## Disabling Two Factor Authentication

You can disable Two Factor Authentication:

- Click on your username at the top right and select 'Two Factor Authentication'
- If it is more than 5 minutes since you logged in you will be prompted to enter your password again.
- A wizard will now guide you through the steps to disable Two Factor Authentication.