X-Payments:Two-factor authentication - Revision history

Dohtur at 13:12, 30 March 2017

2017-03-30T13:12:33Z

Dohtur at 20:42, 31 July 2016

2016-07-31T20:42:16Z

Dohtur: Dohtur moved page Draft:Two-factor authentication to X-Payments:Two-factor authentication

2016-03-15T21:20:37Z

Dohtur moved page Draft:Two-factor authentication to X-Payments:Two-factor authentication

Dohtur at 21:18, 15 March 2016

2016-03-15T21:18:57Z

Show changes

Dohtur at 16:24, 10 March 2016

2016-03-10T16:24:30Z

Dohtur: /* Configuring X-Payments to skip the 2nd step of user authentication */

2016-03-10T16:11:30Z

‎Configuring X-Payments to skip the 2nd step of user authentication

Dohtur: /* Setting up X-Payments to skip the 2nd step of user authentication */

2016-03-10T16:09:08Z

‎Setting up X-Payments to skip the 2nd step of user authentication

Dohtur: /* Setting up user authentication with SMS/text messages */

2016-03-10T08:38:04Z

‎Setting up user authentication with SMS/text messages

Dohtur at 21:39, 9 March 2016

2016-03-09T21:39:49Z

Dohtur at 21:35, 9 March 2016

2016-03-09T21:35:19Z

← Older revision		Revision as of 13:12, 30 March 2017
Line 23:		Line 23:
	After setting up your primary user authentication method, we strongly recommend that you create a list of backup codes that will allow you access to X-Payments if you lose the phone associated with your two-factor authentication settings, or if the authentication method you normally use becomes unavailable for some reason:		After setting up your primary user authentication method, we strongly recommend that you create a list of backup codes that will allow you access to X-Payments if you lose the phone associated with your two-factor authentication settings, or if the authentication method you normally use becomes unavailable for some reason:
	:* [[X-Payments:Setting_up_user_authentication_with_backup_codes \| Setting up user authentication with backup codes]]		:* [[X-Payments:Setting_up_user_authentication_with_backup_codes \| Setting up user authentication with backup codes]]
		+
		+	[[Category:X-Payments User Manual]]

← Older revision		Revision as of 20:42, 31 July 2016
Line 1:		Line 1:
		+	<noinclude>{{XP_manual_TOC}}</noinclude>
		+
	__NOTOC__<br>		__NOTOC__<br>
	Starting with X-Payments version 3.0, we have changed the system of user authentication in X-Payments.		Starting with X-Payments version 3.0, we have changed the system of user authentication in X-Payments.

@@ Line 16: / Line 16: @@
 The authentication method you choose before your first login to X-Payments will be set as your preferred method for user verification. If you wish, later you will be able to [[#AltAuthMethod | set up an additional/alternative method]] of user authentication and, if necessary, [[#ChangePreferredAuthMethod |change your preferred method]].
 After setting up your primary user authentication method, we strongly recommend that you create a list of backup codes that will allow you access to X-Payments if you lose the phone associated with your two-factor authentication settings, or if the authentication method you normally use becomes unavailable for some reason:
@@ Line 46: / Line 48: @@
 <div id="SmsAuthentication"></div>
 ==Setting up user authentication with SMS/text messages==
 This authentication method is based on using one-time passwords received via SMS/text messages. The service is provided by Twilio.
@@ Line 70: / Line 71: @@
 <div id="BackupCodesAuthentication"></div>
 ==Setting up user authentication with backup codes==
 We by all means recommend that you set up more than one method to verify your user identity. At the very least, you should create and save a list of backup codes. These codes will help you to regain access to the X-Payments back end if you lose the phone associated with your two-factor authentication settings, or if the authentication method you normally use becomes unavailable for some reason.
@@ Line 83: / Line 83: @@
 <div id="AltAuthMethod"></div>
 ==Setting up an additional/alternative method of user authentication==
 To be able to log in to X-Payments with 2-step user authentication, you are required to set up at least one user authentication method - Google Authenticator or SMS/text messages. However, choosing one method does not mean you may not use the other one. It is possible to configure your X-Payments so you can use authentication via Google Authenticator or authentication via SMS/text messages based on what is more convenient to you at the moment. To do so, after configuring your primary authentication method (for example, Google Authenticator), you should configure the other authentication method (in our case, authentication with SMS/text messages via Twilio) as an additional method. To access the configuration page for your additional authentication method, use the "<u>configure</u>" link on your profile details page ('''Profile''' > '''View details'''):
@@ Line 90: / Line 89: @@
 <div id="ChangePreferredAuthMethod"></div>
 ==Changing your preferred user authentication method==
 If you need to change your preferred user authentication method (for example, if you want to switch from Google Authenticator, which is your primary and preferred auth method, to SMS/text messages, which is your additional auth method), do the following:
@@ Line 97: / Line 95: @@
 Note that the button '''Set this method as preferable''' does not appear on the page if the method is already your preferred one.
 ==Configuring X-Payments to skip the 2nd step of user authentication==
 If you log in to X-Payments most of the time from the same device, you may want X-Payments to remember you temporarily on that device and disable the 2nd step of user authentication for you for two weeks. This can be easily achieved by enabling the option "Skip this for two weeks" which you can see at the second step of user authentication below the field for entering one-time passwords for user authentication:<br />[[File:xp3_2step_ga_skip.png|border]]<br />After you log in for the first time with this option activated, X-Payments remembers your device and stops asking you for one-time passwords when you use that device to log in.
 You can view the list of devices "remembered" by your X-Payments in the section "Devices data for 2nd step authentication":<br />[[File:xp3_2step_ga_skip1.png|border]]<br />To access the list of devices for which the 2nd step of user authentication is skipped, click on the section name (which is a link); the list of devices will be expanded below:<br />[[File:xp3_2step_ga_skip2.png|border]]<br />You can clear the list at any time by clicking the '''Clear device data''' button:<br />[[File:xp3_2step_ga_skip3.png|border]]<br />After you clear the list, X-Payments will use full-featured two-step authentication for you on all devices again.

@@ Line 98: / Line 98: @@
 ==Configuring X-Payments to skip the 2nd step of user authentication==
-If you log in to X-Payments most of the time from the same device, you may want X-Payments to remember you temporarily on that device and disable the 2nd step of user authentication for you for two weeks. This can be easily achieved by enabling the option "Skip this for two weeks" which you can see at the second step of user authentication below the field for entering one-time passwords for user authentication:<br />[[File:xp3_2step_ga_skip_s.png|border]]<br />After you log in for the first time with this option activated, X-Payments remembers your device and stops asking you for one-time passwords when you use that device to log in.
+If you log in to X-Payments most of the time from the same device, you may want X-Payments to remember you temporarily on that device and disable the 2nd step of user authentication for you for two weeks. This can be easily achieved by enabling the option "Skip this for two weeks" which you can see at the second step of user authentication below the field for entering one-time passwords for user authentication:<br />[[File:xp3_2step_ga_skip.png|border]]<br />After you log in for the first time with this option activated, X-Payments remembers your device and stops asking you for one-time passwords when you use that device to log in.
-You can view the list of devices "remembered" by your X-Payments in the section "Devices data for 2nd step authentication":<br />[[File:xp3_2step_ga_skip1_s.png|border]]<br />To access the list of devices for which the 2nd step of user authentication is skipped, click on the section name (which is a link); the list of devices will be expanded below:<br />[[File:xp3_2step_ga_skip2_s.png|border]]<br />You can clear the list at any time by clicking the '''Clear device data''' button:<br />[[File:xp3_2step_ga_skip3_s.png|border]]<br />After you clear the list, X-Payments will use full-featured two-step authentication for you on all devices again.
+You can view the list of devices "remembered" by your X-Payments in the section "Devices data for 2nd step authentication":<br />[[File:xp3_2step_ga_skip1.png|border]]<br />To access the list of devices for which the 2nd step of user authentication is skipped, click on the section name (which is a link); the list of devices will be expanded below:<br />[[File:xp3_2step_ga_skip2.png|border]]<br />You can clear the list at any time by clicking the '''Clear device data''' button:<br />[[File:xp3_2step_ga_skip3.png|border]]<br />After you clear the list, X-Payments will use full-featured two-step authentication for you on all devices again.

← Older revision		Revision as of 16:09, 10 March 2016
Line 97:		Line 97:
	Note that the button '''Set this method as preferable''' does not appear on the page if the method is already your preferred one.		Note that the button '''Set this method as preferable''' does not appear on the page if the method is already your preferred one.

−	==~~Setting up~~ X-Payments to skip the 2nd step of user authentication==	+	==Configuring X-Payments to skip the 2nd step of user authentication==
		+	If you log in to X-Payments most of the time from the same device, you may want X-Payments to remember you temporarily on that device and disable the 2nd step of user authentication for you for two weeks. This can be easily achieved by enabling the option "Skip this for two weeks" which you can see at the second step of user authentication below the field for entering one-time passwords for user authentication:<br />[[File:xp3_2step_ga_skip_s.png\|border]]<br />After you log in for the first time with this option activated, X-Payments remembers your device and stops asking you for one-time passwords when you use that device to log in.
		+	You can view the list of devices "remembered" by your X-Payments in the section "Devices data for 2nd step authentication":<br />[[File:xp3_2step_ga_skip1_s.png\|border]]<br />To access the list of devices for which the 2nd step of user authentication is skipped, click on the section name (which is a link); the list of devices will be expanded below:<br />[[File:xp3_2step_ga_skip2_s.png\|border]]<br />You can clear the list at any time by clicking the '''Clear device data''' button:<br />[[File:xp3_2step_ga_skip3_s.png\|border]]<br />After you clear the list, X-Payments will use full-featured two-step authentication for you on all devices again.

← Older revision	Revision as of 21:20, 15 March 2016
(No difference)

@@ Line 64: / Line 64: @@
 To change the phone number associated with your 2-step authentication settings, complete the following steps:
-# On the configuration page for the authentication method based on using SMS/text messages ('''SMS/Text message 2nd step verification'''), click the '''Change phone number''' button:<br />[[File:xp3_2step_sms_phone_change.png|border]]<br />A popup window will be displayed providing a form for you to enter a one-time password from an SMS/text message sent to your currently connected device.<br />Type in the one-time password from the SMS/text message (or from Google Authenticator) and click Enter. The popup window will be closed, and the method configuration page will show the note "The authentication method is not configured!":<br />[[File:xp3_2step_.png|border]]<br />
+# On the configuration page for the authentication method based on using SMS/text messages ('''SMS/Text message 2nd step verification'''), click the '''Change phone number''' button:<br />[[File:xp3_2step_sms_phone_change.png|border]]<br />A popup window will be displayed providing a form for you to enter a one-time password from an SMS/text message sent to your currently connected device.<br />[[File:xp3_2step__sms_phone_change1.png|border]]<br />
 # On the method configuration page, add your new phone number and get it verified.

@@ Line 39: / Line 39: @@
 :* [[#BackupCodesAuthentication | Setting up user authentication with backup codes]]<br /><br />
-Later on, if you need to set up Google Authenticator on a different device, you will have to reconnect the app. Note that to complete the process you will be required to enter a one-time password from your currently connected Google Authenticator app (If you have authentication via SMS/text messages configured as an additional method, you can also use a one-time password received via SMS/text message instead of the password from Google Authenticator - these passwords are the same and can be used interchangeably).
+Later on, if you need to set up Google Authenticator on a different device, you will have to reconnect the app. Note that to complete the task you will be required to enter a one-time password from your currently connected Google Authenticator app (If you have authentication via SMS/text messages enabled as an additional method, you can also use a one-time password received via SMS/text message instead of the password from Google Authenticator - these passwords are the same and can be used interchangeably).
 To re-connect the app:
@@ Line 95: / Line 95: @@
 # On the configuration page for the chosen authentication method, click the button '''Set this method as preferable''':<br />[[File:xp3_2step_sms_make_preferable.png|border]]<br />The authentication method will be updated and set as your preferred method:<br />[[File:xp3_2step_sms_make_preferable1.png|border]]<br />
 Note that the button '''Set this method as preferable''' does not appear on the page if the method is already your preferred one.