Good thing that you decided to add some extra security to your account!
In order to set up two-factor authentication you will need:
A phone capable of receiving SMS messages and
An authenticator app or a Security key
If you do not have an authenticator app yet, you can use Google Authenticator, Authy or a similar app.
For security keys, you can use Apple FaceID/TouchID or Windows Hello, if your computer supports it. If you prefer a hardware key, the most popular hardware key is Yubikey but any FIDO2 key will work.
How it works
When you log in to Bugfender with password, you will also be asked for a second authentication factor. The authenticator app or security keys are the preferred authentication methods, and the SMS message is a fallback method, in case you lose access to your primary method.
You can configure one authenticator app and/or as many security keys as you want, for redundancy. You must configure a phone number for SMS messages as fallback.
Setting it up
You can set up your account by visiting your Profile settings, then click on Enable Two-factor Authentication and follow the steps.
If you have any questions regarding how to use two-factor authentication or security on your account please let us know!
Supported countries
You can use two factor authentication if you have a phone capable of receiving SMS messages in one of the following countries:
Afghanistan
Albania
Algeria
Andorra
Angola
Anguilla
Antigua and Barbuda
Argentina
Armenia
Aruba
Australia
Austria
Azerbaijan
Bahamas
Bahrain
Bangladesh
Barbados
Belarus
Belgium
Belize
Benin
Bermuda
Bhutan
Bolivia
Bosnia and Herzegovina
Botswana
Brazil
Brunei
Bulgaria
Burkina Faso
Burundi
Cambodia
Cameroon
Canada
Cape Verde
Cayman Islands
Central African Republic
Chad
Chile
Colombia
Comoros
Cook Islands
Costa Rica
Croatia
Cyprus
Czechia
Democratic Republic of the Congo
Denmark
Djibouti
Dominica
Dominican Republic
Ecuador
Egypt
El Salvador
Equatorial Guinea
Estonia
Ethiopia
Faroe Islands
Fiji
Finland
France
French Guiana
Gabon
Gambia
Georgia
Germany
Ghana
Gibraltar
Greece
Greenland
Grenada
Guadeloupe
Guam
Guatemala
Guinea
Guinea-Bissau
Guyana
Haiti
Honduras
Hong Kong
Hungary
Iceland
India
Indonesia
Iraq
Ireland
Israel
Italy
Ivory Coast
Jamaica
Japan
Jordan
Kazakhstan
Kenya
Kiribati
Kuwait
Kyrgyzstan
Laos
Latvia
Lebanon
Lesotho
Liberia
Libya
Liechtenstein
Lithuania
Luxembourg
Macau
Former Yugoslav Republic of Macedonia
Madagascar
Malawi
Malaysia
Maldives
Mali
Malta
Martinique
Mauritania
Mauritius
Mexico
Moldova
Monaco
Mongolia
Montenegro
Montserrat
Morocco
Mozambique
Myanmar
Namibia
Nepal
Netherlands
Netherlands Antilles
New Caledonia
New Zealand
Nicaragua
Niger
Nigeria
Norway
Oman
Pakistan
Palau
Palestinian Territories
Panama
Papua New Guinea
Paraguay
Peru
Philippines
Poland
Portugal
Puerto Rico
Qatar
Republic of the Congo
Reunion Island
Romania
Russia
Rwanda
Saint Kitts and Nevis
Saint Lucia
Saint Vincent and the Grenadines
Samoa
Sao Tome and Principe
Saudi Arabia
Senegal
Serbia
Seychelles
Sierra Leone
Singapore
Slovakia
Slovenia
Solomon Islands
Somalia
South Africa
South Korea
South Sudan
Spain
Sri Lanka
Suriname
Swaziland
Sweden
Switzerland
Taiwan
Tajikistan
Tanzania
Thailand
Timor-Leste
Togo
Tonga
Trinidad and Tobago
Tunisia
Turkey
Turkmenistan
Turks and Caicos Islands
Uganda
Ukraine
United Arab Emirates
United Kingdom
United States
Uruguay
Uzbekistan
Vanuatu
Venezuela
Vietnam
Virgin Islands, British
Virgin Islands, US
Yemen
Zambia
Zimbabwe
Is 2FA required when authenticating with GitHub?
No. If you want 2FA when logging in with GitHub, you can configure 2FA in GitHub.
Is 2FA required when authenticating with SAML?
No. Bugfender trusts your SAML Identity Provider for the whole authentication process. If you want, you can configure 2FA in your IdP.
Can I disable the SMS message fallback method for 2FA?
Not at this time. Enterprise users that would like a greater degree of control on the authentication process, can integrate Bugfender with their SAML Identity Provider.
Can I disable login with Github?
SaaS users can not disable login with Github. On-Premises and Private Instance users can.