Pipefy takes the safety of its users' information very seriously. That's why we're implementing a new feature that allows users to increase the information safety level and rest assured that their information is as safe as it could be. If a simple login password doesn't seem safe enough, enabling two-factor authentication allows you to provide an extra security layer.
Pipefy uses mobile phone two-factor authentication. Your smartphone serves as "something that the user possesses". To authenticate using 2FA on Pipefy you'll use your personal password (secret) plus a one-time-valid, dynamic passcode. The code will be generated and sent to your mobile device via a special app (you could use Google Authenticator or 'Authy').
How to enable two-factor authentication on Pipefy?
With only a few steps you can add the extra security layer to your team.
First, access your user settings on Pipefy by clicking on your avatar in the top right corner of your screen
As soon as you're inside of your user settings, click the button that says "Enable two-factor authentication":
Then, download Google Authenticator or Authy from your smartphone's app store, open the app and scan the QRCode that appears on your screen. The app will provide you a 6 digit code in order to connect Pipefy to one of the two apps. Enter the provided code and press send:
As soon as you did, you connected Pipefy and Google Authenticator or Authy and can start accessing Pipefy with the tokens that one of the two apps provide you every time you want to login.
Attention! When you connect Pipefy and Google Authenticator or Authy, you will be redirected to a page with your personal recovery codes. In case you ever lose your phone, you can use one of these recovery codes to regain access to your account. Save these codes in a safe place! Be aware that you only have 10 recovery codes and each of them can be used only once. You can generate new ones while logged in, which will invalidate all previously generated codes. Pay attention though, if you use all 10 codes and don't generate news ones, you will lose access to your account!