Using two-factor authentication to sign in to Zendesk Support

What's my plan?

Suite

Team, Growth, Professional, Enterprise, or Enterprise Plus

Support

Team, Professional, or Enterprise

Quick Look: Agent UI > User Avatar > View Profile Page > Security Settings

Two-factor authentication makes it difficult for somebody else to sign in as you. After you enter your password as usual, you'll be asked to enter a 6-digit passcode. You can get the passcode from a text message (SMS) or a two-factor authentication app installed on your mobile device.

An admin can require two-factor authentication for all agents and administrators, but the admin can't set it up for them. If it's required, you'll be prompted to set it up when you sign in. Even if it's not a requirement, you can still set up two-factor authentication for your own use.

Admins can refer to Managing two-factor authentication to learn about important considerations before turning on two-factor authentication.

This article covers the following topics:

• Using a recovery code to regain access to your account
• Turning on two-factor authentication
• Configuring an authenticator app or text messages to receive passcodes
• Changing how often you enter a passcode
• Turning off two-factor authentication

Using a recovery code to regain access to your account

If you lose your phone or can't access your device, you can use one of your recovery codes to reaccess your account. Recovery codes are displayed once upon initial setup of two-factor authentication. When prompted for a passcode at sign-in, enter one of your recovery codes.

You can only use each code once. If you use up all your codes or can't find them, ask your Zendesk admin or account owner to get a recovery code for you.

Turning on two-factor authentication

If two-factor authentication isn't required, you can turn it on for your own use.

To turn on two-factor authentication

1. In the Zendesk Support agent interface, click your user icon in the upper right and select View profile.
2. Click the Security Settings tab.
3. In the Two-factor Authentication section, click Manage.
4. Click Set up 2FA.
5. Click Next.
6. Continue to the sections below, depending on how you'd like to receive passcodes:
   • Configuring an authenticator app
   • Configuring text messages (SMS)

Configuring an authenticator app or text messages to receive passcodes

You have the option to receive passcodes using a two-factor authentication app or through a text message.

Configuring an authenticator app

To use an authenticator app to receive passcodes, you must install a two-factor authentication app on your mobile device. Two-factor authentication apps include Google Authenticator, Authy, Symantec VIP, and Duo Mobile. The app displays a valid passcode on the opening screen. You typically get 30 seconds to use it before it expires, then the app displays a new passcode.

Note: You need to use the mobile version of a two-factor authentication app, not a desktop version.

To configure an authenticator app

1. Select Authenticator app in the Set up two-factor authentication (2FA) dialog, then click Next.

   This dialog appears after turning on 2FA, or upon sign-in when 2FA is required.

   

   You are directed to the Connect your 2FA method step.

   

2. Start the two-factor authentication app on your device, select the option to add an entry, and point your device's camera at the QR code (the blocky square) on the Zendesk dialog in your browser window.

   The mobile app might refer to this action as Scan Barcode.

   The app should automatically scan the QR code and generate a passcode. If you have trouble scanning the QR code, you can manually enter the secret key that's provided. Scanning the barcode is a one-time-only step.

3. Enter the 6-digit passcode generated by the app, then click Save.
4. Click Copy recovery codes and save them in a safe location. If you lose your phone or can't get a passcode, you must use a recovery code to sign in.

From now on, when you sign in, you can get a valid passcode by simply opening a two-factor authentication app on your device. The app displays a valid passcode on the opening screen. The app doesn't need an internet connection to display valid passcodes.

Configuring text messages (SMS)

To configure text messages for two-factor authentication, make sure you include a phone number that is eligible to receive the transactional SMS messages. Some countries, such as India, have restrictions. For more information, see SMS Guidelines.

To configure text messages

1. Select SMS in the Set up two-factor authentication (2FA) dialog, then click Next.

   This dialog appears after turning on 2FA, or upon sign-in when 2FA is required.

   

2. Enter a phone number that can receive text messages, then click Send passcode.

   A text message will be sent to the number shortly.

   Note: The phone number must be in E.164 format.
3. Enter the 6-digit code sent to you, then click Save.

   SMS passcodes for 2FA are valid for 60 seconds.

4. Click Copy recovery codes and save them in a safe location. If you lose your phone or can't get a passcode, you must use a recovery code to sign in.

From now on, when you sign in, you can get a valid passcode from a text message sent to your phone.

Changing how often you enter a passcode

By default, you only have to enter a passcode once every 30 days. You'll always be asked for a passcode when you sign in from a different device for the first time.

To enter a passcode every time you sign in, uncheck the Don't ask again on this computer for 30 days option on the dialog that prompts you for a passcode.

Turning off two-factor authentication

If two-factor authentication is not a requirement, but you turned it on anyway, you can turn it off.

1. In the Zendesk Support agent interface, click your user icon in the upper right and select View profile.
2. Click the Security Settings tab.
3. In the Two-Factor Authentication section, click Manage.
4. Click Turn off 2FA.