What is two-factor authentication?
Two Factor Authentication (2FA) is the latest approach to internet safety. It is an extra layer of protection for user accounts as passwords are no longer considered secure enough. Once enabled, a secret code will be sent to your email or via SMS for every new device, just to ensure that it really is you and not someone pretending to be you!
Why did PetRescue turn on two-factor authentication for all users?
In a perfect world where scammers and hackers didn’t exist, you probably wouldn’t need 2FA. Or even a password. But the internet is far from perfect.
Sneaky hackers can replicate web pages or email addresses to trick you into giving up your login credentials. This can happen to any one of us, at any time, which is why having a username and password won’t hold the fort anymore.
2FA is a modern technology designed to keep you (and your accounts) safe! That's why many modern companies have already adopted this practice, big and small.
Why do PetRescue members need this?
We hear the question "why the security when it's not like you're a bank?" a lot. But cybersecurity is even more important for applications that aren't banking institutions because people are already typically very careful with their bank details. Hackers and scammers LOVE (and prefer) to target the easy-to-target places where you keep your passwords - where one might take security a little less seriously.
Keeping your online security a priority sets us apart from backyard websites that don't take your privacy or security seriously - the convenience of logging in without this step is seldom worth the risk. Hackers and scammers that target the rescue community to steal money from well-meaning adopters, possibly hijacking your account to create fake listings, taking over your Facebook accounts, or worse, locking you out of your own accounts like Facebook and emails.
Do I need a code every time I log in?
Nope! Only one code is required per device. Once the system has recognised your new device, you won’t be asked for a code again.
Enable 2FA in your account settings. If you haven't provided a phone number then the code automatically gets sent to the email address associated with your account.
Can I choose where I receive my code?
If you have provided a mobile number in your 2FA settings then the code will automatically be sent to you via a text message. However, if a mobile number isn't provided then the code will go to the email address associated with your account.
What if multiple people are using a group login?
The two-factor authentication is linked to individual user accounts. This means the code will only be sent to the user's email address or phone number logging in.
If there are multiple people in your organisation that use PetRescue’s platform to list pets, then it is recommended that you create individual user accounts.
Did you know that all PetRescue member organisations can create varying access levels for team members that they add to their group? They can either be group “members” with limited access to the pet listings they create and manage or “admins” with full access to all listings and their group's page. Creating multiple user logins is beneficial as it can help you keep track of updates made on behalf of your group.
Click on "My team members" to add multiple users to your group login. You can select their role based on what level of access you wish to give them.
Member access levels:
🔑 🔑 Think of 2FA as the keys to your house 🔑🔑
2FA security guard Stella is helping keep your account safe.
Level 0: One account, one password
You've given a bunch of keys for your front door or hidden it under your mat for people so they can come and go whenever.
But if something goes wrong (people lose keys, a robber finds your key hiding spot), then you have no choice but to change the locks, which is expensive and annoying and until you do so, anyone can access your home whether you want this or not.
Level 1: Multiple accounts
You've set up a lockbox for your key at your front door. As long as people know the code, they can open it and use the key to get in.
But if something goes wrong (the code is shared, there's an ex you don't want to get in, a robber finds your key hiding spot), then you have no choice but to change the code on the lockbox; it's less expensive and annoying, but until you do so, anyone with the code can access your home whether you want this or not.
Level 2: 2FA
Each person has the lockbox for the key AND their own keycode to get in.
It takes a little time to set up initially, but you know who is coming or going, and it's easy to disable access for just that person if you need to. Reduced chance of unauthorised or unwanted access! Only the people you want in your home can enter!
If you have any other questions or concerns about 2FA or account security feel free to drop us an email at members@petrescue.org.au.