 | This is an essay. It contains the advice or opinions of one or more Wikipedia contributors. This page is not an encyclopedia article, nor is it one of Wikipedia's policies or guidelines, as it has not been thoroughly vetted by the community. Some essays represent widespread norms; others only represent minority viewpoints. |
 | This page in a nutshell: Administrators should ideally have enabled two-factor authentication, and can do so by following this guide |
How to enable 2FA, the simple way (smartphone)
1. Download a 2FA app onto your smartphone. You probably want to use Google Authenticator because it's the best[citation needed]
2. Pop over to Special:OATH
3. Scan the QR code with Google Authenticator (or enter the two-factor account name and key if you're using something else)
4. Enter a verification code from your app into the OATH screen to complete the enrollment.
That's it, you're all set up
How to enable 2FA, the simple way (desktop - windows)
Please note: Using a windows based TOTP client slightly decreases the effectiveness of a two-factor system - if someone has access to your PC and your password, they will still be able to log in
1. Download winauth[1] (https://winauth.com/download/) onto your Windows PC.
2. Pop over to Special:OATH
3. Enter the two-factor account name and key from the OATH screen into the program. It should show you where to put it.
4. Enter a verification code from winauth into the OATH screen to complete the enrollment.
That's it, you're all set up
What is two-factor authentication (2FA)?
2FA is a method of computer access control in which a user is only granted access after successfully presenting several separate pieces of evidence to an authentication mechanism – typically at least two of the following categories: knowledge (something they know), possession (something they have), and inherence (something they are).
Read this
- Once you've entered the verification code, you will also be presented with a series of one-time scratch codes. Safely store a copy of these codes, should you lose or have a problem with your TOTP client you will be locked out of your account unless you have access to these codes.
More help?
See the meta help page - this is quite technical