Documentation
Book a demo

Authentication

Two-factor authentication

Two-factor authentication (2FA) is a security process that requires two distinct forms of identification to access an account.

Cloudsmith provides support for two-factor authentication via a time-based one-time password (TOTP) application such as Google Authenticator, LastPass Authenticator, and Okta Verify.

How it works

To use 2FA to authenticate with Cloudsmith, you must enable it for your account and register a TOTP application.

After that, each time you log in to Cloudsmith, you must log in via social or password-based login, and then authenticate by entering a 6-digit pin from your TOTP application.

Note

If you are unable to authenticate with your TOTP application, we also offer a recovery service using disposable tokens.

To require 2FA to access a workspace, a workspace owner must enable 2FA in the workspace authentication settings.

Enable 2FA for your account

To enable 2FA for your account:

  1. In the Cloudsmith web app, click the profile image icon to display the My Account menu.

  2. Click Passwords and 2FA.

  3. Under Two-factor authentication, click Enable two-factor authentication.

  4. The Enable two-factor authentication dialog displays a QR code and a secret key.

    Use your TOTP application to set up 2FA by scanning the QR code or entering the secret key.

  5. After you set up 2FA on your TOTP application, click Next Step.

  6. In the AUTHENTICATION CODE field, enter the latest available token from your TOTP application and click Enable two-factor authentication.

  7. In the Backup tokens dialog, copy your backup codes and store them in a secure location. You will not be able to see these codes again.

    2FA is now enabled for your user account. When you log in to Cloudsmith, you will be prompted to enter a 6-digit pin from your TOTP application.

Disable 2FA for your account

To disable 2FA for your account:

  1. In the Cloudsmith web app, click the profile image icon to display the My Account menu.

  2. Click Passwords and 2FA.

  3. Under Two-factor authentication, click Disable two-factor authentication.

  4. In the Disable two-factor authentication dialog, enter an authentication code from your TOTP application.

    2FA is now disabled for your user account. When you log in to Cloudsmith, you will not be prompted to authenticate using your TOTP application.

Enable 2FA for a workspace

Important

Enabling 2FA will mean that all members of the workspace will be forced to authenticate with 2FA, which will lock out those who do not have it enabled.

To enable 2FA for a workspace, you must have the Owner role and 2FA enabled for your user account.

  1. In the Cloudsmith web app, go to the workspace Settings tab, and click Authentication > 2FA.

  2. On the Two-factor authentication (2FA) page, click Enable.

  3. In the Enable two-factor authentication dialog, click Enable two-factor authentication to confirm that you want to enable 2FA for the workspace.

    2FA is now enabled. Users are required to authenticate with 2FA to access the workspace.

Disable 2FA for a workspace

Important

Disabling 2FA will mean that members of the workspace will no longer be required to authenticate with 2FA, which might present a larger security risk.

You must have the Owner role to disable 2FA for a workspace.

  1. In the Cloudsmith web app, go to the workspace Settings tab, and click Authentication > 2FA.

  2. On the Two-factor authentication (2FA) page, click Disable.

  3. In the Disable two-factor authentication dialog, click Disable two-factor authentication to confirm that you want to disable 2FA for the workspace.

    2FA is now disabled. Users are not required to authenticate with 2FA to access the workspace.

Check 2FA enablement for a user

You can check if 2FA is enabled for a specific user on the workspace Accounts tab in the Cloudsmith web app.

In the Users table, the 2FA column displays ENABLED if 2FA is enabled for the user: