Use Google Authenticator, Microsoft Authenticator or any another Authenticator App for Two-Factor Authentication

Team: Huntress EDR
Product: Google Authenticator/Microsoft Authenticator/Other Authenticator Tool
Environment: Huntress.IO management portal
Summary: Using and enabling Google Authenticator is an approved method for Two-Factor (2FA) / Multi-factor (MFA) Authentication with the Huntress.IO portal.

Google Authenticator provides a time-based 6 digit code that users enter after logging in with their username and password. The code changes every 30 seconds which makes it very hard for an attacker to guess the current code. Enabling Google Authenticator as a second factor means you'll be required to enter the code whenever you log into the Huntress portal. For systems you trust and use often, you may select an option that will remember the device for up to 30 days so you don't have to enter the code as often.

This option will also allow you to use other popular Authenticator apps, such as Microsoft Authenticator or LastPass. However, we specifically call out Google Authenticator due to popularity and general ease of use.

Setup

Before you can set up Google Authenticator you'll need to Enable Two-Factor Authentication and generate backup codes. Once two-factor authentication is enabled, a Google Authenticator setup link will appear.

1. Open your user preferences page.
2. Click Setup to begin the setup process.
3. Open Google Authenticator / Microsoft Authenticator on your mobile device and scan the provided QR code.
4. To complete the setup, enter the code from the Google Authenticator / Microsoft Authenticator app and click Verify

Note: the time on your device must be set to "automatic," if the time on your phone is off, OTAP (Google Authenticator) will not work.

Disable Google Authenticator

If you decide you no longer want to use Google Authenticator as a second factor you can delete it from your user preferences page and you will no longer be prompted for the code. You will then be prompted to set up or use another two-factor method if others are enabled.