Manage Two-factor Authentication

This topic describes how to manage the two-factor authentication feature, including removing trusted devices, changing authentication method, and disabling the two-factor authentication feature.

Manage Two-factor Authentication of super administrator account

Remove a trusted device

As a super administrator, in case you lost access to a trusted device, you can remove it from the list if necessary.

  1. Log in to PBX administrator portal with super administrator account, click your account at the top-right corner, then go to Change Password & Security > Security Settings.

    The trusted devices are displayed in the Trusted Device List section.

  2. Click beside the device that you want to remove.
  3. In the pop-up window, click OK.
Change two-factor authentication method

You can change the two-factor authentication method for your super administrator account as needed.

  1. Log in to PBX administrator portal with super administrator account, click your account at the top-right corner, then go to Change Password & Security > Security Settings.
  2. Click beside the current authentication method.
  3. Select the desired method, then complete the follow-up settings accordingly.
Disable two-factor authentication for your account
You can disable two-factor authentication for your super administrator account at any time.
  1. Log in to PBX administrator portal with super administrator account, click your account at the top-right corner, then go to Change Password & Security > Security Settings.
  2. Unselect the checkbox of Two-Factor Authentication.
  3. In the pop-up Password window, enter your account password and click Confirm to verify your operation.
  4. In the Security Settings tab, click Save.

    The webpage prompts a message "Edited successfully.", which means that you have successfully disabled two-factor authentication.

Manage Two-factor Authentication of user account

Change permitted two-factor authentication method

You can change the permitted two-factor authentication method for user account as needed.

  1. Log in to PBX web portal, go to Extension and Trunk > Extension.
  2. Click beside the desired extension, then click the Security tab.
  3. In the Permitted 2FA Verification Method drop-down list, select the permitted verification method.
    Note: If the user has enabled 2FA and the current verification method is not in the permitted list, the 2FA will be disabled and user needs to re-configure again.
  4. Click Save.
Disable two-factor authentication
If your extension user lost access to their two-factor authentication (e.g. they lost their authenticator device or could not receive authentication code via email), you can disable the two-factor authentication for their extension accounts, so that they can directly log in with username and password.
  1. Log in to PBX web portal, go to Extension and Trunk > Extension.
  2. Click beside the extension, then click the Security tab.
  3. Scroll down to the Login Security section, then unselect the checkbox of Two-Factor Authentication.
  4. Click Save.

    The two-factor authentication of the extension account is disabled.

Enforce two-factor authentication
To enhance security for users' accounts, you can make two-factor authentication mandatory for extension users. In this way, users will be required to go through two-factor authentication when logging in using their extension username and password, thus preventing unauthorized access.
For more information, see Enforce Two-factor Authentication for Extension Users.