
Table of Contents
Two-Factor Authentication
Two-factor authentication (2FA) adds an extra layer of security by requiring a code from your mobile phone when you sign in. It works alongside a strong password: the password is your first layer, 2FA is the second. Start by making sure your password is strong.
Password Requirements
TetherX checks the strength of every new password before accepting it. A password that is too easy to guess is rejected, and you will be asked to choose a stronger one.
What makes a valid password
- At least 8 characters, and longer is always better. Length is the single biggest factor: a 12 character password is far harder to crack than an 8 character one.
- Mix character types. Combining lower case, upper case, numbers and symbols (for example
!@#$%^&*?_~-) raises the strength quickly. A password mixing letters with numbers, or letters with symbols, comfortably clears the bar.
A short password made only of letters, or only of numbers, is usually rejected as too weak even if it looks random.
What gets rejected
- Common passwords. Well known choices such as
password,letmein,qwertyor123456are on a blocklist and will never be accepted. - A single repeated character, such as
aaaaaaor111111. - Your email address, or a recognisable part of it, weakens the password sharply. A password that is your email is rejected.
- Sequences like
abcor123, and repeated runs likeabcabc, both count against the score.
Examples
| Password | Result | Why |
|---|---|---|
sunny |
Rejected | Too short, letters only |
password1 |
Rejected | Based on a common password |
Coffee7Rain! |
Accepted | Long, mixes upper, lower, a number and a symbol |
blue-River-42-lamp |
Accepted | Long passphrase with mixed characters |
A good habit is to string together a few unrelated words with numbers or symbols between them: easy for you to remember, hard for anyone else to guess.
How It Works
When 2FA is enabled, you'll need:
- Your email and password (something you know)
- A code from your authenticator app (something you have)
Even if someone obtains your password, they still need to unlock your phone and open your authenticator app to get in.
Setting Up 2FA
Requirements
- A smartphone with an authenticator app (Google Authenticator, Microsoft Authenticator, Authy, 1Password, or any TOTP-compatible app)
- Your current TetherX password
Steps
- Click your profile icon in the top right corner → Security tab
- Select Authenticator App from the Two-Factor Authentication dropdown
- Enter your current password and click Update User
- Scan the QR code with your authenticator app (or manually enter the setup key)
- Enter the 6-digit code shown in your app to verify setup
Warning: Regular users cannot disable 2FA once enabled - this prevents attackers from turning it off. Administrators, integrators, and staff can disable their own 2FA (requires password) or reset it for other users.
Signing In with 2FA
After entering your email and password, you'll be prompted for a verification code:
- Open your authenticator app
- Find the entry for TetherX
- Enter the 6-digit code (codes refresh every 30 seconds)
- Click Verify
Tip: Codes are time-sensitive. If codes aren't working, ensure your phone's clock is set to automatic.
Lost Access to your Authenticator
If you lose access to your authenticator app (lost phone, app deleted, or device reset), contact your administrator to reset your 2FA settings. If you are the administrator, contact your integrator or Support.
Managing 2FA for Other Users
Administrators and integrators can enable or disable 2FA for other users.
Enabling 2FA
- Go to Users → select the user → Security tab
- Select Authenticator App from the dropdown
- Click Update User
The user will be signed out of all active sessions and required to complete 2FA setup on their next login.
Disabling 2FA
- Go to Users → select the user → Security tab
- Select None from the Two-Factor Authentication dropdown
- Click Update User
2FA is disabled immediately. Use this to help users who have lost access to their authenticator app.
Related
- User Permissions - Configure what each user can access and do in the system.
- Reset Your Password - Change your password or recover a forgotten one.
