Two factor authentication

If you login to your account with a combination of your email address and a password, 2FA is enabled and provides you with an additional layer of security.

With two factor authentication enabled, you are required to enter a 6-digit code when you log-in (the 2FA codes are sent to the inbox of the email address you use with Prezly):

This prevents attackers from gaining access to your account when the password is leaked or brute-forced (trial and error attack).

Prezly has minimum requirements for password length, and defends against brute-force attacks. It is still recommended that users configure two factor authentication for their accounts.

As an alternative to waiting for the 2FA codes to be delivered to your mailbox, you may opt to install and use an Authenticator app on your mobile device. An Authenticator app is a mobile application that generates one-time passwords (OTP) that are time-based, helping protect your accounts from unauthorized access. 

To do pair this with your Prezly account, please have an authenticator app installed on your phone:

• Google Authenticator, or
• Microsoft Authenticator

are often recommended.

Then, using Prezly please go to:

1. Settings (bottom left navigation)
2. Login Details
3. Scroll down to see Two factor authentication
4. Click the 'Set up authenticator app' button

Follow the instructions in the panel.

Your account is now secured with two factor authentication.

To keep using passwords only, you can remove the authenticator app setup:

You can make sure your team always uses two factor authentication to further protect password-based logins.

Go to:

1. Settings
2. Security
3. Click the toggle next to 'Enforce two factor authentication'

Team members are notified in the app to configure their two factor authentication app.

Prezly sends email codes to team members who do not complete this setup.

Alternatively to enabling up two factor authentication for Prezly, you may also switch to Google or an SSO provider (single sign-on) as your identity provider.

In the case of a lost device, your team members may be locked out of their accounts, unable to provide the security code during login.

The owner account is permitted to remove two factor app settings from other team members.

Go to:

1. Settings
2. Manage team
3. Find the team member
4. Open the edit account panel using the dotted icon
5. Click the Remove two factor app setup button

If the two factor organizational policy is enabled, the team member will still receive email codes until they set up two factor app again.