Sythe Two Factor Authentication Tutorial

[n4n0]

Introduction

A. What is two factor authentication?

Two-step authentication is a way of logging into websites that requires more than just a password. Using a single password to log into a website leaves you vulnerable to hacking because there is only a single piece of information that a malicious person needs to acquire to access your account.

B. Why use it on my Sythe account?

Enabling this feature adds an additional layer of security to your Sythe.org account. When logging in to Sythe on another device such as your mobile device or a work/school computer, after entering your username and password, you will be asked for a two-factor authentication code. This additional step ensures that a malicious person who has discovered your password will not be able to log in to Sythe as you.

C. Sounds familiar, I'm pretty sure I've seen or used it somewhere before...

Chances are, you have. If you've ever been to an ATM, you might have witnessed a form of two factor authentication. The machine uses a form of two-step verification: To prove who the individual is when accessing money from the bank, the system requires two items: the physical ATM card (think of this as your Sythe username and password) and the PIN (two factor authentication code). If an individual loses their ATM card, money is still safe; anyone who finds the card cannot withdraw money as they do not know the PIN. The same is true if the attacker has only knowledge of the PIN and does not have the card. When this is enabled, if someone gains access to your Sythe account, your account is still safe, given your TSA isn't compromised. This is what makes two-step verification more secure: there are two layers of security.

Enabling Two Factor Authentication​

To set up your two factor authentication for your sythe.org account go to: http://www.sythe.org/account/two-step

You will need a Google Authenticator capable app. There are plenty of these available free on most phones. On IPhone I use the DUO security app, which seems to work well.

When you add two factor you are given a QR code which the phone app will scan off the screen. Once successfully scanned you need to generate your first login code and enter it at the next screen to confirm you want to add two-factor.

After this the system will give you a backup code. Make sure you write down your backup code on a piece of paper and keep it in your wallet. You will need this to recover your account should you lose your phone. Please do not keep your backup code on your computer.

Note: There are a number of apps you can download for free on the App Store.

Spoiler: These are free ones that work and are recommended:

From left to right the names are (Google Authenticator, Duo Mobile, Trustwave, ThoriumCloud, OptionsHouse Authenticator)

Steps:

1) Once you have the app installed on your mobile device, open the app, and click on "Scan Barcode".
2) Go to http://www.sythe.org/account/two-step. "Click enable two factor authentication". Your screen should now look this.
3) Hold your mobile device steadily up to the screen as if you're taking a picture of the bar code. Your phone should automatically recognize the it after a few seconds.
4) Back on your computer screen, hit next. You should be directed to a page that looks like this. Simply enter the code.
5) Once you've entered the right code your screen should look like this. Congratulations! You've now enabled two factor authentication.

*REMEMBER TO MAKE SURE YOU WRITE DOWN YOUR BACKUP CODE ON A PIECE OF PAPER AND STORE IT IN A SECURE PLACE SUCH AS YOUR WALLET!



D. Something went wrong/it didn't work

You need to make sure your phone's clock is set to the correct time. Most phones have a setting that allows you to synchronize the phone with your local celltower's clock. You should enable this option if you have trouble getting two factor activated on your sythe account.