Two-Factor Authentication (2FA) Guide

Two-Factor Authentication (2FA) adds a critical extra layer of defense beyond your password. Even if someone obtains or guesses your password, they cannot access your account without your physical security key or authenticator app.

Why YubiKey / TOTP is better than email verification codes:

• Instant logins: No waiting for email codes to arrive in your inbox. Touch your key or check your app for instantaneous access.
• Stronger security: Hardware keys (YubiKey) and TOTP apps are immune to email compromise and SIM swapping.
• Works offline: TOTP apps generate codes on your device without needing mobile reception or Internet access.
• Automatic bypass of email challenges: Once configured, your YubiKey or TOTP handles all two-factor checks seamlessly.

YubiKeys provide the highest level of security through physical hardware authentication. To register your YubiKey with your 1984 account:

1. Log in to the 1984 Dashboard and click Settings.
2. Scroll down to the 2FA - Two Factor Authentication section and locate the YubiKeys card.
3. Click inside the YubiKey OTP input field.
4. Insert your YubiKey into your computer’s USB port (or hold your NFC YubiKey near your device) and lightly touch the golden contact disc/button on the key. The key will automatically generate a one-time OTP into the field.
5. (Optional) Enter a descriptive label in the Label field (e.g. “Primary YubiKey 5C”, “Backup Key”) to help identify it later.
6. Click the Add button. Your YubiKey will be verified immediately and linked to your account.

Time-based One-Time Passwords (TOTP) allow you to generate 6-digit verification codes directly from your smartphone or password manager. Supported apps include Aegis, 2FAS, Google Authenticator, Bitwarden, 1Password, and Microsoft Authenticator.

1. Make sure you have an authenticator app installed on your smartphone or computer.
2. Log in to the 1984 Dashboard and go to Settings.
3. In the 2FA - Two Factor Authentication section, find the TOTP card and click Active TOTP.
4. A QR code and a secret text key will appear on screen. Open your authenticator app, choose “Add Account” or “Scan QR Code”, and scan the QR code (or manually type the secret text key into your app).
5. Your app will generate a 6-digit rotating code. Enter this 6-digit code into the verification field in the Dashboard and confirm.
6. Once verified, your TOTP badge will update to Active.

Removing a YubiKey

If you replace or lose a YubiKey, you can remove it in your account settings:

1. Navigate to Settings.
2. Under the YubiKeys section, select the key you want to remove from the list of registered keys.
3. Click the Delete button to deactivate that specific key.

Deactivating TOTP

To turn off TOTP authenticator app verification:

1. Go to Settings.
2. Under the TOTP section, click the Deactivate TOTP button.
3. TOTP is immediately disabled for your account.