Two-Step Verification

1 Introduction

Two-step verification adds an extra layer of security to Skyword by requiring you to sign in using a password and a verification code that is sent to your mobile device.  This drastically reduces the chances of an unauthorized individual gaining access to your Skyword account. To break into your account with two-step verification enabled, attackers would not only have to know your username and password, they would also need to have access to your mobile device. This document provides an overview of two-step verification.

 

2 Activating Two-Step Verification

When prompted to activate two-step verification for your account, selecting an authentication method is the first step, as shown in Figure 1. This happens immediately after you sign in—you won’t be able to do anything in the Skyword Platform until you activate two-step verification.

Figure 1. You will be prompted to select an authentication method for two-step verification.

The preferred method is generating the verification code with Google Authenticator, a free app that can be installed on a mobile device (iOS, Android, Windows Phone and Blackberry devices are supported). You can also receive the verification code by text message (carrier rates may apply). After selecting a method, you will need to set up your mobile device.

2.1 Google Authenticator

If you choose to generate verification codes with Google Authenticator, you will need to install the app, add a new time-based token for Skyword, and then scan the barcode displayed on the screen, as shown in Figure 2. To setup on your mobile device, please follow these instructions.

Figure 2. You can set up Google Authenticator to generate the verification code.

If your mobile device does not have a camera, or the barcode cannot be scanned, you can manually enter a secret key in Google Authenticator, as shown in Figure 3.

Figure 3. You can manually enter a code to link Google Authenticator on your mobile device.

Next, you will need to enter the verification code generated by Google Authenticator to verify that the mobile device has been set up, as shown in Figure 4.



Figure 4. Enter the verification code to verify the mobile device.

2.2 Text Messages

If you want to receive verification codes via text messages, you will need to enter your phone number, as shown in Figure 5. Your phone must be capable of receiving SMS text messages (carrier rates may apply).



Figure 5. You can configure your phone to receive verification code via text message.

Skyword will send a text message with a verification code. You will need to enter this verification code to verify that the phone has been set up, as shown in Figure 6.

Figure 6. You must enter the verification code to verify your phone number.

2.3 Confirmation and Backup Codes

You will receive an email message confirming that two-verification has been activated. At this point, we strongly recommend printing and storing the backup codes. The link is displayed on the last page of the two-step verification setup process, as shown in Figure 7. For information about backup codes, see Section 2.5.1.

Figure 7. You should print and store the backup codes for your account.

You can also tell the Skyword Platform to trust your computer for 30 days. Skyword will remember the computer, and you will not need to enter another verification code on this computer for 30 days.

 

3 Signing in with Two-Step Verification

Once two-step verification has been activated for your account, you will need to enter a verification code when signing in to the Skyword Platform, as shown in Figure 8.

Figure 8. You will need to enter a verification code to sign in.

You can also tell the Skyword Platform to trust your computer for 30 days. When this checkbox is selected, Skyword will remember the computer and you will not need to enter another verification code for 30 days.

 

4 Two-Step Verification Settings

The settings for two-step verification can be changed on the My Account page. The settings are displayed in the Account Security section, as shown in Figure 9. The settings will only be available when two-step verification has been activated for your account.

Figure 9. You can change two-step verification settings on the My Account page.

4.1 Accessing the Backup Codes

Skyword automatically generates ten backup codes for your account. These codes allow you to sign in to the Skyword Platform without your mobile device. The backup codes can be accessed when the setup process is completed, or from the My Account page.

Note: It’s very important to print the backup codes and store them in a safe location. If you ever lose your phone or cannot receive SMS text messages, you can use a backup code for emergency access to your Skyword account. To use a backup code, you sign in to Skyword and enter a backup code when prompted for the verification code.

Follow these instructions to access your backup codes:

  1. From the user menu, select My Account. The My Account page appears.
  2. In the Account Security section, click View Backup Codes, as shown in Figure 10.
  3. The backup codes are displayed, as shown in Figure 11. You should print the codes and store them in a safe place. 

Figure 10. Accessing your backup codes.

Figure 11. Print your backup codes and store them in a safe place.

Backup codes can only be used one time each. When a backup code is used, it will be removed from the list of backup codes displayed.

4.2 Generating New Backup Codes

When you run out of backup codes, you can generate new ones. Any existing backup codes that have not been used will be invalidated when new backup codes are generated. Follow these instructions to generate new backup codes:

  1. From the user menu, select My Account. The My Account page appears.
  2. In the Account Security section, click View Backup Codes, as shown in Figure 12.
  3. Click Generate New Codes, as shown in Figure 13.

Figure 12. You can access your backup code settings on the My Profile page.

Figure 13. You can generate new backup codes.

The Skyword Platform will generate new backup codes. Remember, all of the old backup codes are invalidated when the new backup codes are generated.

4.3 Switching Authentication Devices

You can switch the mobile device you use to receive verification codes. Switching the mobile device may be necessary if you lose your mobile phone, or purchases a new one. Only one authentication device can be attached to your Skyword account. Follow these instructions to switch your authentication device:

  1. From the user menu, select My Account. The My Account page appears.
  2. In the Account Security section, click Change Settings, as shown in Figure 14.
  3. Enter your account password when prompted. The Two-step Verification Settings page appears, as shown in Figure 15.
  4. Click Move to a Different Device.
  5. Follow the instructions to link the new authentication device to your Skyword account.

Figure 14. You can change your authentication device.

Figure 15: You can change your authentication device.

Once the process is complete, you will have successfully switched your authentication device.

4.4 Changing the Authentication Method

You can change your two-step authentication method. If using Google Authenticator, you can choose to start receiving text messages, and vice versa. Follow these instructions to change the authentication method:

  1. From the user menu, select My Account. The My Account page appears.
  2. In the Account Security section, click Change Settings, as shown in Figure 16.
  3. Enter your account password when prompted. The Two-step Verification Settings page appears, as shown in Figure 17.
  4. Click the Switch to… link to change the authentication method.
  5. Follow the instructions to set up the new authentication method.

Figure 16. You can change the authentication method.

Figure 17. You can change your authentication method.

Once the process is complete, you will have successfully changed the authentication method for your Skyword account.

4.5 Revoking Access to Trusted Computers

When you tell Skyword to trust a computer for 30 days, Skyword sends a small piece of data—known as a cookie—to the web browser on the computer. Once the cookie is saved, you will not need to enter another verification code on the computer for 30 days. Multiple computers can be trusted. Access to these trusted computers can be revoked at any time by using the Reset Trusted Computers feature.

Follow these instructions to revoke access to trusted computers:

  1. From the user menu, select My Account. The My Account page appears.
  2. In the Account Security section, click Reset Trusted Computers, as shown in Figure 18.
  3. Enter your account password when prompted.
  4. Click Reset My Trusted Computers.

Figure 18. You can reset your trusted computers.

When the trusted computers are reset, the Skyword Platform invalidates any and all cookies that have been created for your account. Access to all computers will be revoked. You will need to enter a verification code to sign in to the Skyword Platform again.

Was this article helpful?
2 out of 3 found this helpful
Follow
Have more questions? Submit a request

Comments

Powered by Zendesk