Two-factor authentication means you enter a 6-digit code as well as your password. It is optional for every customer account, including Management Admins. Nauticare supports two methods, and you can have either, both or neither:
- Authenticator app (TOTP): a code made on your phone by Google Authenticator, 1Password or a similar app. It changes every 30 seconds and works without signal or internet.
- Email verification: a one-time code emailed to your account's address each time you sign in. It works for 10 minutes.
There are no SMS codes, push approvals, hardware keys or printable backup codes.
Where to manage it
Go to Account → Security and Privacy, to the block headed 2 Factor authentication. Each method has its own row with an Enable or Disable button. When a method is on, the word Enabled appears under its name.
Turning on the authenticator app
Press Enable on the Authenticator app (TOTP) row. A dialog titled Set up authenticator app takes you through three steps:
- Password. Enter your Nauticare password and press Continue. If the password is wrong, you see "Wrong password or setup could not be started."
- QR code. Scan the code with your authenticator app. The entry appears in the app as Nauticare with your email address. If your app cannot scan, the field Can't scan? Enter the key manually shows the same key as text, with a copy button. Press Next.
- Confirm. Type the 6-digit code your app shows now and press Verify and Enable. If the code is wrong or out of date, you see "Invalid code. Please try again." Codes change every 30 seconds, so use the one on screen now.
The method is only turned on when step 3 succeeds. If you close the dialog early, it stays off. If you start again, you get a new QR code, so delete any half-finished entry from your authenticator app.
Turning on email verification
Press Enable on the Email verification row. A dialog titled Enable Email Verification opens:
- Enter your Nauticare password and press Send code.
- A 6-digit code arrives at your account's email address. Type it in and press Confirm.
The code works once and expires after 10 minutes. If it has expired, you see "Invalid code. Please try again." Close the dialog and start again to get a new code.
Wrong codes typed while setting up a method count toward the same limit as wrong codes at sign-in. After 10 wrong codes in a row, the account is locked (see When You Cannot Get In).
Signing in once a method is on
After your password is accepted, you move to the Two-step verification screen.
- With one method on, that method's prompt appears straight away.
- With both on, use the Authenticator app and Email buttons at the top to switch between them. Switching clears anything you have typed.
Enter the 6 digits and press Verify. If email verification is on, a code is emailed as soon as your password is accepted, even if you plan to use the authenticator app. This screen has no resend button. If the email never arrives, press Back to login and sign in again to get a new one.
Turning a method off
Press Disable on the method's row. A dialog titled Disable two-factor method asks for your Nauticare password. Confirm with the red Disable button. A message appears at the bottom of the screen: Authenticator app disabled or Email verification disabled. If the password is wrong, the dialog shows "Wrong password or method cannot be disabled."
Turning off a method does not sign you out and does not affect the other method. If you turn off both methods, you sign in with your password alone.