Two-Factor Authentication by Duo

Overview

Two-Factor Authentication is the most effective way to protect your store against remote attacks. You double up security with a physical device - your smartphone. Attackers cannot access your account without this device.

You will need to have Duo Mobile application installed on your smartphone. It is available for iPhones, Androids, BlackBerry and many more.

The first factor is your username and password for the primary authentication. The second factor can be:

• code from Duo Mobile;
• push notification;
• phone call.

Push notifications are strongly recommended by Duo as a second factor.

How it works

Start authorizing in the store by entering your username and password.

You’ll be suggested to select a method for the second step of authentication.

Let’s select Push notification.

Slide to view the push notification.

Choose Approve.

Your login request has been approved. Authorization is successful. You have logged in to the admin panel of your store.

Setting up the add-on

1. Install the Two-factor authentication by Duo add-on. Enter the details of your Duo account in the add-on settings.
2. Enable two-factor authentication under Settings -> Security settings:

Setting up authenticator

Set up authenticator for the administrator.

Select the necessary admin under Customers > Administrators.

Open the Editing profile page and switch to the Two-factor authentication tab. Click Enroll.

You will be taken to the Duo website to set up your account. Click Start setup and complete all the steps.

You should get the following notice at the end of the setup process:

Go back to the admin profile and click Check status.

Test your integration by using one of the methods: code from Duo mobile, push notification, or phone call.

Сlick Save the changes.

User guide

Learn more about the add-on in our User guide.