Two-Factor Authentication Using an Authenticator App

Two-Factor Authentication (2FA) adds an extra layer of security to your Druid accounts. By requiring a temporary, time-based verification code from a mobile authenticator app (such as Google Authenticator or Authy) alongside standard user credentials, 2FA protects sensitive data and prevents unauthorized tenant access.

This guide explains how Druid Portal administrators can enable authenticator-based 2FA tenant-wide, and how portal users can enroll, manage recovery codes, and swap authenticator apps.

Enable two-factor authentication

For Druid Portal administrators

To enable authenticator app support for your entire tenant, follow these steps:

  1. Log into the Druid Portal.
  2. Navigate to Administration > Settings on the main menu.
  3. Click the Security tab.
  4. Scroll down to the Two Factor Login area and check Enable Two-Factor With Authenticator.

  5. Click Save all in the top-right corner of the page.

Set up two-factor authentication for your account

For Druid Portal users

Once tenant administrators enable 2FA, you will be prompted to set up your authentication method during your next login attempt.

  1. Go to your tenant login page in your browser.
  2. Enter your username and password, then click Log in.

  3. If multiple authentication options are enabled, select Authenticator App from the verification type dropdown and click Submit.

  4. Open your preferred authenticator app (e.g., Google Authenticator, Authy) on your mobile device.
  5. Scan the QR code displayed on your screen.
    6. Info: If you cannot scan the QR code, click the copy button next to the setup key and enter it into your authenticator app.
  6. Your app will generate a 6-digit one-time password. Enter this code in the input boxes on the Druid screen and click Submit.

    7. The Save your recovery codes page will appear. These codes are crucial for gaining account access if you lose your mobile device.

  7. Click Copy codes or Download codes and store them in a secure location.

  8. Select I have saved my recovery codes in a safe place and click Finish. Your account is now more secure.

You can continue to the Druid Portal by clicking Continue to app.

At the next login, you will be asked for the user credentials, then for the verification code from your authenticator app.

Info: If you lose access to your authenticator app, use a recovery code to log in. You can use a recovery code only once. If you use all of them, you can generate new ones.

Set up another authenticator app

For Druid Portal users

If you switch mobile devices or want to register a different authenticator service, you can do that from your account settings:

  1. Log into the Druid Portal.
  2. Click your profile icon in the top-right corner and select My settings.

  3. Click the Two Factor Login tab.
  4. Scan the new QR code with your new authenticator app.

At next login, at the second-authentication step, use the code generated by the new authenticator app.

Generate new recovery codes

For Druid Portal users

NOTE: Regenerating recovery codes will immediately invalidate all your previously saved recovery codes.

If you have misplaced your recovery codes, or have used most of your remaining codes, you can generate a fresh set:

  1. Click your profile icon in the top-right corner and select My settings.

  2. Click the Two Factor Login tab, then click Regenerate recovery codes.
  3. Click Yes on the confirmation prompt to invalidate old codes.

  4. Copy or download your new codes and keep them safe.

  5. Select I have saved my recovery codes in a safe place and click Finish.
  6. Click Save in the My settings window to apply the changes.