Getting started with two-factor authentication (2FA)

Topic

This article explains how to set up two-factor authentication for Datto SaaS Protection users, Partner Portal users, and Backupify Direct users.

Environment

Datto Partner Portal
Datto SaaS Protection
Backupify

Description

To access your account, you will need to set up two-factor authentication (2FA) with your application. If you haven't already done so, the Partner Portal or the Backupify login page will prompt you to enable two-factor authentication at your next login.

Why two-factor authentication?
Enable two-factor authentication
Download and install the Authy app
Changing your information
Enabling 2FA for all users

Why two-factor authentication?

To learn more about two-factor authentication, see What is two-factor authentication (2FA)? (external link).

Conventional password protection offers a single layer of security. Passwords are vulnerable to divulgence through human error and defeat through increasingly sophisticated forms of automated attack.

Two-factor authentication provides additional security. After entering your password, the authentication software contacts you via trusted means, such as your mobile phone number, and requests additional verification. This extra protection dramatically reduces the success rate for malicious access attempts.

Enable two-factor authentication

1. Navigate to your Partner Portal or Backupify login page, enter your account credentials, then click the LOG IN button.

For Datto partners, including SaaS Protection users, navigate to the Partner Portal login page.
For Backupify Direct users, navigate to Backupify login page.

Figure 1: The Login window (click to enlarge)

2. Enter your country code and mobile phone number, then click the Enable 2FA button.

Figure 2: Enable 2FA prompt (click to enlarge)

If you enter a phone number and Datto detects that it may be a non-mobile number, you will see the same prompt as shown in Figure 2. The dialog box, however, will contain additional instructions about how you can set up the Authy application (Figure 3).

The same conditions apply to users who reside in Canada since Datto won't be able to determine if the number provided is from a non-mobile phone.

Figure 3: Enable 2FA prompt (click to enlarge)

3. After enabling 2FA from the previous step, you will need to provide a verification code. You can receive a verification code via text message or phone call (depending on whether you entered a mobile phone or landline number). Enter the code in the 2FA Verification window and click the Submit button.

If you need to re-send the token, choose SMS or Phone Call to receive a new token via text message or over the telephone.

Figure 4: The 2FA verification modal (click to enlarge)

Once you submit the verification code, 2FA activation is complete.

Download and install the Authy app

Datto recommends the Authy 2FA app (external link) for logging into the Datto Partner Portal with two-factor authentication. You can download the following versions:

Mobile app: You can authenticate via your mobile phone via push notification or token. You will only be able to authenticate via mobile if you provided a cell phone number.
Desktop app: This app lets you authenticate via desktop app push notification or token. You can use the desktop app if you use either your desk phone or mobile phone.
Chrome extension: Authenticate from the Google Chrome browser via push notification or token. You can use the desktop app if you use either your desk phone or mobile phone.

Datto also allows you to authenticate with your preferred 2FA solution if necessary. Consult your application's setup guide for configuration instructions if you choose to leverage a solution not described in this article.

Figure 5: The Authy download page (click to enlarge)

Changing your information

You can change employee names or phone numbers used for 2FA with partner accounts from the Partner Portal user settings page.

Enabling 2FA for all users

Partner Portal Admins can require 2FA for all Portal users in their organization.

1. In the Datto Partner Portal, click your username in the top right-hand corner, then select Organization Settings from the drop-down menu.

2. In the Authentication Settings card, click Enable to activate 2FA for all of your organization's Portal users. After enabling, users who have not set up 2FA will see a prompt to do so the next time they log in.

Once you enable two-factor authentication for your organization, it cannot be disabled again.

Figure 6: The Authentication Settings card (click to enlarge)

Additional Resources