Manage Two-Factor Authentication (2FA) in Wingify

Overview

As the name implies, Two-Factor Authentication, or 2FA, is a two-level authentication mechanism that protects your data from cyber-crime and fraud. It assures that even if a third-party obtains your login credentials unlawfully, they will not be able to get past the additional layer of security provided by 2FA.

The first layer of authentication is done when you log in to an application using a username and password, face recognition or fingerprint scan. Once passing it, you will be taken to the second layer, which involves confirming your identity via entering an OTP - this is how 2FA typically works. If you lose access to the email or device that has your authenticator app, you can use the backup codes for authentication as a fallback method.

Two-Factor Authentication in Wingify

Wingify's Two-Factor Authentication fortifies the security of your Wingify account online, with an extra layer of authentication, which can be configured by either of the following modes:

• Link an external authenticator app to generate a one-time passcode
• Use email code verification
• Use backup codes as a fallback authentication method

The configured mode of authentication will be applied to each of your sessions.

In Wingify, you can enable 2FA at the user level and workspace level. If enabled at the user level or the main workspace level, 2FA is performed at the login. If enabled at the workspace level, 2FA is required when switching to that workspace.

Things to Consider Before Enabling Two-Factor Authentication in Wingify

• If 2FA is enabled at the workspace level but disabled at the user level, the users will still be requested to input the passcode they received on their email.
• If 2FA is disabled at the main workspace and user levels but enabled for an additional workspace, you will be prompted to enter the passcode when you switch to that workspace.
• When you enable 2FA on a workspace level, all the corresponding users are notified of the same via email.
• In the case of using an authenticator app, you are allowed 5 attempts each for enabling/disabling 2FA per 60 seconds to enter the passcode right. When the limit expires, you will have to wait till the 60 seconds get over to be re-enabled with another set of 5 attempts for 60 seconds. This applies for login sessions too.
• For email code verification, you can only generate 10 passcodes per day, each for enabling/disabling 2FA. When this limit lapses, you will not be able to enable/disable 2FA for the next 24 hours through the email code verification method of authentication.
• You can only generate fifty passcodes per day for logging in (including regeneration of passcode), using email code verification.
• If you enable SSO on your Wingify account, you cannot enable 2FA; you can only enable either SSO or 2FA on your Wingify account.

Enable 2FA at the User level in Wingify

To enable 2FA at the user level, follow these steps:

1. Log in to your Wingify account.
2. Navigate to the Profile menu in the top-right corner, and select Settings.
3. Go to Profile Details.
4. Under the Security section, click Enable 2FA.
5. In the Enable Two-Factor Authentication dialog that appears, select an authentication method from either of the following and click Proceed:
   • Authenticator app - By default, this option remains selected. You can choose this option to use any third-party authentication app to fetch a passcode.
   • Email code verification - Choose this option to use the passcode sent to your email address.
6. If you have selected the Authenticator app option, you will be shown a quick response (QR) code. Scan the QR code with the authenticator app to link the app and generate a passcode. Alternatively, you can use the serial code that is displayed below the QR code. Once done, click Next Step to enter the 6-digit passcode, as generated in the authenticator app.

7. If you have selected the Email code verification option, the system will send a 6-digit passcode to your email address. If you have not received the passcode, use the Resend option that regenerates a new 6-digit passcode.

   Note: The passcode, as received via email is valid for 10 minutes. If you have any problems with the created passcode, please contact us at support@wingify.com.
8. After entering the passcode, click Verify and Enable 2FA.

Post-requisite

To verify if 2FA is successfully enabled for your Wingify account, log out of your Wingify account and log in again. You must now be prompted to enter the passcode after you have entered your email address and password.

Enable 2FA at the Main Workspace Level in Wingify

Prerequisites

• Enable 2FA on the user level for yourself.
• You must have admin-level access or above in the main workspace.

To enable 2FA for all the users of the main workspace:

1. Navigate to the Profile menu in the top-right corner, and select Settings.
2. Go to Accounts > Security.
3. Navigate to the Two-factor authentication enforcement section and select the Enable two-factor authentication option. This will enforce 2FA for every user from the very next login.
4. To finalize this change, click Confirm in the confirmation dialog that appears.

Workspaces with 2FA Enabled

To see the list of workspaces for which 2FA is enabled:

1. Navigate to the Profile menu in the top-right corner, and select Settings.
2. Go to Profile Details.
3. Under the Security section, if 2FA is enabled for any workspace, you can see a list of those workspaces below the user level 2FA setting.

Use Backup Codes for Two-Factor Authentication

2FA backup codes provide a secure, self-service fallback authentication method to ensure you can always access your Wingify account. If you lose access to your primary 2FA method, such as your authenticator app or email, these single-use numeric codes allow you to bypass the standard verification step without requiring manual intervention from Wingify Support.

For example, if you enable 2FA using an authenticator app on your phone and later lose access to that device, you can use one of your previously downloaded backup codes during login to regain access to your account. This prevents permanent account lockouts and ensures your workflow remains uninterrupted even when your primary login methods are unavailable.

If you cannot access your standard 2FA codes configured on your authenticator app or email, here’s how you can use a backup code to complete the two-step verification process:

1. On the Wingify login screen, enter your email and password.
2. On the 2-Step Verification screen, select Enter a backup code.
3. Enter one of your unused 6-digit backup codes from the backup codes file you downloaded when you enabled 2FA.
4. Select Verify and Sign In.

To generate new codes:

1. Navigate to Profile menu > Settings > Profile details > Security > Backup codes.
2. Click Generate new code.

The Backup codes section displays the current count, for example, 10 codes remaining.

Disable 2FA

The Disable 2FA feature allows account owners and admins to disable user-level 2FA for a specific user. This functionality is specifically designed for 2FA configured at the user level via Settings > Profile details. If 2FA is enforced globally at the organization level, you can not disable the user-level 2FA.

Prerequisite:

• You must have an Owner or Admin role in the Wingify account.
• The target user must have set up 2FA at the user level.

To disable 2FA for a specific user, follow these steps:

1. Log in to your Wingify account as an Owner or Admin.
2. On the Wingify dashboard, go to the Profile menu in the top right corner and click Settings. 
3. Go to Users and locate the user you want to disable 2FA for.
4. Check the 2FA Method column for that user; it indicates the following:
   1. Email / App: Indicates 2FA is enabled by the user. You can disable 2FA for this user.
   2. Disabled: 2FA is not currently enabled for this user.
   3. Organization Icon : Indicates 2FA is enforced at the account/organization level for a particular user. You cannot disable 2FA for such users.
5. Click the More options icon at the far right of the user's row.
6. Click Disable 2FA.
   A success pop-up appears confirming that 2FA is disabled for the user. 
7. Click Done to close the pop-up.

Once 2FA is disabled for a user, they can log in to Wingify using their standard email address and password. Wingify does not prompt them to set up 2FA on their next login. However, as a security best practice, they can re-enable 2FA at any time by going to Settings > Profile details > Security.

Need more help?

For further assistance or more information, contact Wingify Support.