With two-factor authentication (2FA) a password alone is not enough to log in: in addition you enter a six-digit code that an authenticator app on your smartphone generates every 30 seconds. Even someone who knows your password cannot get into your account without your phone. 2FA is available in every package, Free and Premium.
Set up two-factor authentication
- Install an authenticator app on your smartphone, e.g. Google Authenticator, FreeOTP or any other app for time-based one-time passwords (TOTP).
- Log in at admin.hpage.com, click the user icon in the top right corner and open Security (admin.hpage.com/app/account/security).
- In the section Two-Factor Authentication, click Set up two-factor authentication.
- Scan the QR code shown with your authenticator app. The app now shows a code for hPage that changes every 30 seconds.
- Enter the current code in the field Mobile TAN and click Activate two-factor authentication.
The page also shows a restore code. Write it down or save it in a safe place; you need it if you lose your phone (see below).
Log in with two-factor authentication
From now on the login works in two steps: after you entered your e-mail address and password, the window Account Protection asks for the code from your authenticator app. Enter the current code and click Login. Each code can be used only once, and a wrong code counts like a wrong password, so after several wrong attempts the login is blocked for a while.
If you tick Stay logged in, the device keeps its login and you do not have to enter a code again on it until you log out or end the session under Auto Login Sessions.
New phone or phone lost
The code is generated from the restore code that was shown when you set up 2FA. On a new phone, add an account manually in your authenticator app and type in this restore code; the app then generates the same codes as before. If you still have the old phone, you can instead log in, deactivate 2FA and set it up again with the new phone.
Deactivate two-factor authentication
- Open Security and click Deactivate two-factor authentication.
- Enter the current code from your authenticator app in Mobile TAN.
- Click Deactivate two-factor authentication again to confirm.
You can set 2FA up again at any time; a new QR code and a new restore code are then created.