Using two-step verification

This section describes two-step verification, which can help you increase the security of your account in Kaspersky Security Center Cloud Console.

About two-step verification

Two-step verification can help you increase the security of your account in Kaspersky Security Center Cloud Console. When this feature is enabled, every time you sign in to Kaspersky Security Center Cloud Console with your email address and password, you enter an additional one-time security code. With two-step verification, criminals cannot sign in to your account if they steal or guess your password, they must have access to your mobile phone as well. Also, when two-step verification is enabled, you must enter an additional one-time security code if you forget your password.

After you set up two-step verification, you are responsible for keeping your mobile phone physically secure and for maintaining access to your phone number.

You can get a one-time security code in either of the following ways:

• A security code is sent by SMS to your mobile phone number.

  In this case, if you lose access to your mobile phone, you are not able to sign in to your account in Kaspersky Security Center Cloud Console until you restore access to your phone number.

• A security code is generated in an authenticator app that is installed on your mobile phone.

  We strongly recommend that you set up two-step verification by using an authenticator app. In this case, you can sign in to your account even if your mobile phone is not connected to the internet or a mobile network.

  We have tested only Google Authenticator and Microsoft Authenticator for compatibility with Kaspersky Security Center Cloud Console, and these applications were free to use at that time. The interfaces of these applications may be unavailable in your preferred language. Please also check the GDPR compliance and privacy policies of the applications before using them. Kaspersky is in no way sponsored, endorsed by, or otherwise affiliated with any of the owners of these applications.

  Microsoft Authenticator can be installed on mobile devices only.

  We also recommend that you install an authenticator app on a device other than your mobile phone. This will allow you to sign in to your account if your mobile phone is ever lost or stolen.

  In this case, if you lose access to your mobile phone and you do not have an authenticator app on another device, you are not able to sign in to your account in Kaspersky Security Center Cloud Console until you restore access to your phone number. After that, use the security code that is sent by SMS.

If you previously configured a secret question to restore your password if it is lost, the security question feature will be permanently disabled after you set up two-step verification.

Scenario: Setting up two-step verification

Two-step verification can help you increase the security of your account in Kaspersky Security Center Cloud Console. After you complete the scenario in this section, two-step verification of your account will be set up.

The scenario proceeds in stages:

1. Adding your phone number

   At this stage, you set up two-step verification by SMS.

2. Installing and configuring an authenticator app

   Install and configure an authenticator app.

   We strongly recommend that you set up two-step verification by using an authenticator app. In this case, you can sign in to your account even if your mobile phone is not connected to the internet or a mobile network.

   We also recommend that you install an authenticator app on a device other than your mobile phone. This will allow you to sign in to your account if your mobile phone is ever lost or stolen.

3. Changing your phone number

   If necessary, you can change the phone number that you use for two-step verification.

Setting up two-step verification by SMS

To set up two-step verification by SMS:

1. In Kaspersky Security Center Cloud Console, click the link containing your account name, and then select Manage user account.

   The My Profile window of the Kaspersky Account portal opens.

2. If two-step verification is disabled, enable the Two-step verification is disabled toggle switch.
3. In the No phone number provided window that appears, click the Confirm button.
4. Under Enter your phone number, specify the mobile phone number that you want to use in two-step verification, and then click the Provide phone number button.

   You can use the same phone number for up to five accounts.

   A 6-digit security code is sent to the specified phone number.

5. Under Enter the verification code that was sent to <phone number>, enter the received security code.
6. In the Enter your current password window that opens, specify the password of your account in Kaspersky Security Center Cloud Console, and then click the Next button.

Two-step verification is set up. Now, every time you sign in with your email address and password, or if you forget your password, you will need to enter a one-time security code that you get by SMS to the specified phone number.

You can now install and configure an authenticator app, change your phone number, or disable two-step verification.

Setting up two-step verification by using an authenticator app

Authenticator apps cannot be used in Kaspersky Security Center Cloud Console as a standalone verification method. You must first set up two-step verification by SMS. If you disable two-step verification via your mobile phone number, verification via an authenticator app is turned off automatically. After you have set up both verification via SMS and via an app, you will be able to select a verification method on the sign-in page or if you forget your password.

To set up two-step verification by an authenticator app:

1. Set up two-step verification by SMS.
2. Download, install, and run the authenticator app that you want to use.

   We have tested only Google Authenticator and Microsoft Authenticator for compatibility with Kaspersky Security Center Cloud Console, and these applications were free to use at that time. The interfaces of these applications may be unavailable in your preferred language. Please also check the GDPR compliance and privacy policies of the applications before using them. Kaspersky is in no way sponsored, endorsed by, or otherwise affiliated with any of the owners of these applications.

   Microsoft Authenticator can be installed on mobile devices only.

   If you want, you can use other apps at your own risk. The app that you use must support 6-digit security codes.

   We also recommend that you install an authenticator app on a device other than your mobile phone. This will allow you to sign in to your account if your mobile phone is ever lost or stolen.

3. In Kaspersky Security Center Cloud Console, click the link containing your account name, and then select Manage user account.

   The My Profile window of the Kaspersky Account portal opens.

4. If two-step verification is disabled, enable the Two-step verification is disabled toggle switch.
5. Enable the Authenticator app is disabled toggle switch.

   The portal page displays a QR code.

   If you want to set up the authenticator app on a device that cannot scan QR codes, click the I can't scan it link. A 16-character secret key is displayed.

6. In the authenticator app on each device, scan the QR code to create an account. Please refer to your app's documentation for more information.

   If you want to set up the authenticator app on a device that cannot scan QR codes, create an account in the authenticator app, and then enter the displayed secret key.

   A 6-digit security code is generated in your authenticator apps.

7. Verify that the security codes generated in your apps are the same on each device.
8. Return to the Kaspersky Account portal, and then click the Next button.
9. Enter the generated security code.
10. In the Enter your current password window that opens, specify the password of your account in Kaspersky Security Center Cloud Console, and then click the Next button.

Two-step verification by an authenticator app is set up. Now, every time you sign in with your email address and password, or if you forget your password, you will need to enter a one-time security code that is generated in your authenticator app.

You can now disable the use of an authenticator app or completely disable two-step verification.

Changing your mobile phone number

To change the mobile phone number that is used in two-step verification by SMS:

1. In Kaspersky Security Center Cloud Console, click the link containing your account name, and then select Manage user account.

   The My Profile window of the Kaspersky Account portal opens.

2. If two-step verification is disabled, enable the Two-step verification is disabled toggle switch.
3. Under Phone number, click the Change phone number link.
4. Under Enter your phone number, specify the new mobile phone number that you want to use in two-step verification, and then click the Provide phone number button.

   A 6-digit security code is sent to the specified phone number.

5. Under Enter the verification code that was sent to <phone number>, enter the received security code.

Your mobile phone number is changed. Now, one-time security codes will be sent to the new phone number.

Disabling two-step verification

If you no longer want to use two-step verification, you can disable it, as described in this section.

Disabling two-step verification will decrease the security of your account. We strongly recommend that you continue using two-step verification.

If you set up two-step verification by SMS, you can disable two-step verification. If you set up two-step verification by an authenticator app, you can disable the use of the app or completely disable two-step verification.

To disable the use of an authenticator app:

1. In Kaspersky Security Center Cloud Console, click the link containing your account name, and then select Manage user account.

   The My Profile window of the Kaspersky Account portal opens.

2. Disable the Authenticator app is enabled toggle switch.
3. In the confirmation window that opens, click the Confirm button.
4. In the Enter your current password window that opens, specify the password of your account in Kaspersky Security Center Cloud Console, and then click the Next button.

The use of an authenticator app is disabled. The settings of two-step verification by an authenticator app are deleted. You can now delete accounts in your authenticator apps.

Later, you can set up two-step verification by an authenticator app again.

To completely disable two-step verification:

1. In Kaspersky Security Center Cloud Console, click the link containing your account name, and then select Manage user account.

   The My Profile window of the Kaspersky Account portal opens.

2. Disable the Two-step verification is enabled toggle switch.
3. In the confirmation window that opens, click the Confirm button.
4. In the Enter your current password window that opens, specify the password of your account in Kaspersky Security Center Cloud Console, and then click the Next button.

Two-step verification is disabled. If you used two-step verification by an authenticator app, the settings of two-step verification are deleted. You can now delete accounts in your authenticator apps.

Later, you can set up two-step verification again.