The UserWay security team encourages its users to enable Multi-Factor Authentication (MFA) in their settings in order to have maximum protection of their personal data. As soon as MFA is enabled for the user's account, it will be enforced upon login into widget management, management dashboard, and scanner tool.
Activating MFA will require users to pass two steps during their logging into the UserWay's products: login credentials authentication and verification by an additional factor: one-time code or time-based password.
For detailed instructions on enabling MFA, please refer to the following guides:
Enforces 2FA on the account level for all team members via the Dashboard:
The Account Owner Accesses the Team Management in UserWay Dashboard: Go to https://manage.userway.org/team in your web browser and log in using your UserWay credentials.
Enable the Toggle to Enforce 2FA:
After logging in, click on your profile icon located in the top right corner.
Accessing MFA section via the Dashboard:
Access the UserWay Dashboard: Go to https://manage.userway.org in your web browser and log in using your UserWay credentials.
Navigate to My Account:
After logging in, click on your profile icon located in the top right corner.
Select "My Account" from the drop-down menu.
Enabling MFA with Email Method:
Enable Email Authentication: Locate and enable the option for "Email authentication" This will initiate the setup process.
Verify Your Email: Check your registered email inbox for a message titled "Email verification for UserWay" This email contains a verification code:
Enter the Verification Code: Cpy the verification code provided, and paste it into the designated field on the MFA setup page, then click "Next"
Complete Setup: You should be able to see the "Enable Mail Authentication" enabled as shown in the screenshot:
Enabling MFA with Virtual device: (Application)
Enable Application: Locate and enable the option for "Enable virtual device authentication." This will initiate the setup process.
Download the Application: Download your preferred authentication application (e.g., Google Authenticator, Authy, Microsoft Authenticator) from your device's app store.
Scan QR Code: Open the downloaded authentication application and use it to scan the QR code provided on the MFA setup page.
Enter Verification Code: Enter the 6-digit verification code generated by your authenticator app into the designated field on the MFA setup page, then click "Next"
Backup code: Your can use these one-time backup codes to access your account, click "Close" to complete the setup
For Virtual Device MFA, install a mobile app that generates time-based passwords. We recommend Google Authenticator, available for download here:
App Store: Google Authenticator on the App Store
Google Play Store: Google Authenticator on Google Play