Two-factor authentication
For additional security we recommend you to enable two-factor authentication on technician and admin accounts.
Two-factor authentication is a method of access control that requires users to enter the second key besides the first one (which is your account password) to successfully log in. Usually, the second key is only accessible from a different device for security purposes. In Jitbit's case, you get that second key from an app on your phone. To put it simply, if your password gets stolen or brute-forced a hacker won't be able to log into your account without having an access to your phone.
How to enable two-factor authentication
Every user should enable two-factor authentication for themselves. Here is how to do that:
1. Go to your user profile by clicking your username in the top-left corner and click Edit
2. Scroll to the bottom and click Enable two-factor auth
3. Follow the manual on your screen: install Google Authenticator on your phone and scan the QR code with your phone's camera.
4. Enter the six-digit code you seen in the text box and submit the form.
How to disable two-factor authentication
Just click Disable two-factor auth on the user profile page.
Important notes to administrators
1. If a user loses accesses to his phone, an administrator can disable two-factor authentication for any user.
2. The underlying encryption algorithms rely on your Shared Secret (Shared secret for remote authentication setting in General Settings). If you have to change it, disable two-factor authentication first or you will be locked out of the application.
3. Two-factor authentication is not supported when you use Windows Authentication or SAML.
Two-factor authentication is a method of access control that requires users to enter the second key besides the first one (which is your account password) to successfully log in. Usually, the second key is only accessible from a different device for security purposes. In Jitbit's case, you get that second key from an app on your phone. To put it simply, if your password gets stolen or brute-forced a hacker won't be able to log into your account without having an access to your phone.
How to enable two-factor authentication
Every user should enable two-factor authentication for themselves. Here is how to do that:
1. Go to your user profile by clicking your username in the top-left corner and click Edit
2. Scroll to the bottom and click Enable two-factor auth
3. Follow the manual on your screen: install Google Authenticator on your phone and scan the QR code with your phone's camera.
4. Enter the six-digit code you seen in the text box and submit the form.
How to disable two-factor authentication
Just click Disable two-factor auth on the user profile page.
Important notes to administrators
1. If a user loses accesses to his phone, an administrator can disable two-factor authentication for any user.
2. The underlying encryption algorithms rely on your Shared Secret (Shared secret for remote authentication setting in General Settings). If you have to change it, disable two-factor authentication first or you will be locked out of the application.
3. Two-factor authentication is not supported when you use Windows Authentication or SAML.