Setup Multi-Factor Authentication (MFA) at RCS: Difference between revisions

From howdoi
No edit summary
No edit summary
 
(14 intermediate revisions by 3 users not shown)
Line 1: Line 1:
{{abox
{{AboxNew
| name         = Google 2 Step Verification
| name = Setup Multi-Factor Authentication at RCS
| summary      = 2-step verification adds an extra layer of security.
| learning =  
| for_employees = y
| instruction =  
| for_students  = y
| community = x
| for_parents  =  
| summ = Setup multi-factor authentication for your RCS account
| cat1          = Google
| maintained = JM
| cat2          =
| year = 2024-2025
| maintained   = JD
| year         = 2022-2023
}}
}}
__TOC__


'''*** NOTE: We recommend all users [[Use Passkeys|switch to Passkeys]] instead of using MFA'''


2-step verification adds an extra layer of security to your Google Account, drastically reducing the chances of having the personal information in your account stolen. You sign in with something you know (your password) and something you have (a code sent to your phone). To break into an account with 2-Step Verification, bad guys would not only have to know your username and password, they'd also have to get your phone.  
2-step verification adds an extra layer of security to your Google Account, drastically reducing the chances of having the personal information in your account stolen. You sign in with something you know (your password) and something you have (a code sent to your phone). To break into an account with 2-Step Verification, bad guys would not only have to know your username and password, they'd also have to get your phone.  


== How it works ==  
==Enable 2-Step Account Verification==


# Log into your [https://myaccount.google.com/ RCS Google Account] using your RCS username and password.
=== Enroll your account ===
# Enter a 6-digit code that will be sent to you via text, voice call, or Google’s mobile app called Authenticator (available on [https://itunes.apple.com/us/app/google-authenticator/id388497605?mt=8 iOS] and [https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=en Android])
#Review the Google 2-step verification [https://www.google.com/landing/2step/features.html features] and then...
* You can choose to trust your computer when you enter the code -- this means you won't be asked for a code again when you sign in from this computer. If you sign in from another computer, however, you’ll be asked for a code.
#'''Get started with Google 2-step verification by [https://myaccount.google.com/security/signinoptions/two-step-verification/enroll-welcome enrolling now.] Please go through all of the setup steps from Google!'''
#Riverdale recommends setting up 2-step verification with '''''Google Prompts''''' or an '''''authenticator app''''' like Google Authenticator ([https://apps.apple.com/us/app/google-authenticator/id388497605 iOS], [https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=en_US&gl=US Android]) and not SMS
#*By default during the set-up process, you will be asked for a phone number
#*Instead of entering your phone number, click '''''Choose another option'''''
#*Set up '''''Google Prompts''''' or '''''Google Authenticator''''' as your primary authentication option
#*You can always add/remove/change these later!


== Protect your account with 2-Step Verification ==  
===Google Authenticator App===
If you set up 2-Step Verification, you can use the Google Authenticator app to receive codes. You can still receive codes without internet connection or mobile service. [https://support.google.com/accounts/answer/1066447?hl=en&co=GENIE.Platform%3DAndroid Click Here].


*Review the Google 2-step verification [https://www.google.com/landing/2step/features.html features] and then...
=== Get Backup Codes ===
*'''Get started with Google 2-step verification by [https://myaccount.google.com/security/signinoptions/two-step-verification/enroll-welcome enrolling now.] Please go through all of the setup steps from Google!'''
If you don't have access to your primary or backup phones, you can sign in with a backup code. To get your backup codes,


=== Set up a backup phone ===
#Go to your '''''2-Step Verification''''' settings page.
If your primary phone is ever unavailable Google can send a code to a backup line, like your home or work phone or even a family member's phone. To set one up,
#Click on '''''Show/Generate''''' codes.
# Go to your [https://myaccount.google.com/security/signinoptions/two-step-verification Google 2-Step Verification settings page].
#Store this code in a <u>secure location</u>, such as your home safe or a safety deposit box.
# Click on Add a phone number in the Backup phones section.


=== Get backup codes ===
===Set up a backup phone===
If you don't have access to your primary or backup phones, you can sign in with a backup code. To get your backup codes,
If your primary phone is ever unavailable Google can send a code to a backup line, like your home or work phone or even a family member's phone. To set one up:
# Go to your 2-Step Verification settings page.
# Click on Show/Generate codes.
# Store this code in a '''secure location''', such as your home safe or a safety deposit box.


=== Google Authenticator App===
#Go to your [https://myaccount.google.com/security/signinoptions/two-step-verification Google 2-Step Verification settings page]
If you set up 2-Step Verification, you can use the Google Authenticator app to receive codes. You can still receive codes without internet connection or mobile service. [https://support.google.com/accounts/answer/1066447?hl=en&co=GENIE.Platform%3DAndroid Click Here].
#Click on '''''Add a phone number''''' in the '''''Backup phones''''' section


=== Creating application specific password for Google 2-step verification ===
===Creating application specific password for Google 2-step verification===


Once you have done the 2-step verification setup, and using Gmail on Outlook or on iOS devices, you will get errors saying “Wrong password”. All you need to do is, create one time Application specific password, and use it to setup your Gmail account on iOS or other mail clients you are using. [https://support.google.com/mail/answer/1173270?hl=en Application-specific password required.].
Once you have done the 2-step verification setup, and using Gmail on Outlook or on iOS devices, you will get errors saying “Wrong password”. All you need to do is, create one time Application specific password, and use it to setup your Gmail account on iOS or other mail clients you are using. [https://support.google.com/mail/answer/1173270?hl=en Application-specific password required.].
* POP and IMAP email clients such as Outlook, Mail and Thunderbird
 
* Gmail and Google Calendar on smartphones
*POP and IMAP email clients such as Outlook, Mail and Thunderbird
* ActiveSync for Windows Mobile and iPhone
*Gmail and Google Calendar on smartphones
*ActiveSync for Windows Mobile and iPhone


[https://www.youtube.com/watch?v=xK9GJYNs2-E Using apps with 2-Step Verification Video]
[https://www.youtube.com/watch?v=xK9GJYNs2-E Using apps with 2-Step Verification Video]


== What could go wrong? ==  
==Example Usage==
 
#Log into your [https://myaccount.google.com/ RCS Google Account] using your RCS username and password
#Respond to the MFA prompt to gain access to your account typically by doing one of these two steps
#*Enter a 6-digit code that will be sent to you via Google’s mobile app called Google Authenticator (available on [https://itunes.apple.com/us/app/google-authenticator/id388497605?mt=8 iOS] and [https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=en Android]) or through text and voice call
#*Respond to a prompt on your mobile device if you have any Google apps installed and logged-in to your RCS Google Account
You can choose to trust your computer when you enter the code. This means you won't be asked for a code again when you sign in from this computer. If you sign in from another computer, however, you’ll be asked for a new code.


* These are the [https://support.google.com/accounts/answer/185834?hl=en common issues] you might run into with 2-step verification.
==What could go wrong?==  
* Some apps and devices require an [https://support.google.com/accounts/troubleshooter/3141849?hl=en extra step to work with 2-step verification].


== Common questions about 2-Step verification ==
*These are the [https://support.google.com/accounts/answer/185834?hl=en common issues] you might run into with 2-step verification
;Can I do 2-step authentication with my personal GMail account too?
*Some apps and devices require an [https://support.google.com/accounts/troubleshooter/3141849?hl=en extra step to work with 2-step verification]
:Yes! We encourage you to do so right away. The Google Authenticator app can be used for many accounts, not just Google ones. LastPass 2-factor authentication can use the Google Authenticator app, as an example.
;When do I need to enter a verification code? Do I need to enter the code every time I sign in?
:You need to enter a new code every 30 days or after deleting your web browser's cookies. On the sign in page, click the option to "Remember verification for your computer" on your computer, and you won't have to re-enter your code for 30 days. Do not select this option for a public computer, such as a shared computer in an Internet cafe.
:The verification code is used only to sign in to your Google Apps account and not any other of our company's applications.


;Will my Riverdale.edu password change?
==Common questions about 2-Step verification==
:No, your password stays the same.


;What if I don't have my mobile phone when I need to sign in or I have trouble with the codes?
==== Can I do 2-step authentication with my personal Gmail account too? ====
:During the setup process, you will receive codes that you can write down and use when you don't have your phone. Otherwise, you can contact RCS Tech Support who can temporarily disable 2-Step Verification.
Yes! We encourage you to do so right away. The Google Authenticator app can be used for many accounts, not just Google ones. LastPass 2-factor authentication can use the Google Authenticator app, as an example.


;I just enrolled in 2-Step Verification, and now I can't access email on my phone.
==== When do I need to enter a verification code? Do I need to enter the code every time I sign in? ====
:After you enroll in 2-Step Verification, for any mobile devices or desktop applications that stop accessing Google (including IMAP email clients), create an application-specific password and enter it into the device/application instead of your normal password. This is a one-time process, [https://support.google.com/accounts/answer/185833 Application-specific passwords.]
You need to enter a new code every 30 days or after deleting your web browser's cookies. On the sign in page, click the option to "Remember verification for your computer" on your computer, and you won't have to re-enter your code for 30 days. Do not select this option for a public computer, such as a shared computer in an Internet cafe. The verification code is used only to sign in to your Google Apps account and not any other of our company's applications.
 
==== Will my Riverdale.edu password change? ====
No, your password stays the same while you are enrolling in 2FA.
 
==== What if I don't have my mobile phone when I need to sign in or I have trouble with the codes? ====
During the setup process, you will receive codes that you can write down and use when you don't have your phone. Otherwise, you can contact RCS Tech Support who can temporarily disable 2-Step Verification.
 
==== I just enrolled in 2-Step Verification, and now I can't access email on my phone... ====
After you enroll in 2-Step Verification, for any mobile devices or desktop applications that stop accessing Google (including IMAP email clients), create an application-specific password and enter it into the device/application instead of your normal password. This is a one-time process, [https://support.google.com/accounts/answer/185833 Application-specific passwords.]


[https://www.youtube.com/watch?v=xK9GJYNs2-E Using apps with 2-Step Verification]
[https://www.youtube.com/watch?v=xK9GJYNs2-E Using apps with 2-Step Verification]
[[Category:Family Resources]]

Latest revision as of 14:58, 5 September 2024

Howdoi Banner.png
People Graphic.png
Learning Instruction Community
Check Mark Graphic - Unchecked.png Check Mark Graphic - Unchecked.png Check Mark Graphic.png
SummarySetup multi-factor authentication for your RCS account
AuthorMaintained by Jeremy Martinez
HelpGet help with this article
StatusUp-to-date for the 2024-2025 school year.

*** NOTE: We recommend all users switch to Passkeys instead of using MFA

2-step verification adds an extra layer of security to your Google Account, drastically reducing the chances of having the personal information in your account stolen. You sign in with something you know (your password) and something you have (a code sent to your phone). To break into an account with 2-Step Verification, bad guys would not only have to know your username and password, they'd also have to get your phone.

Enable 2-Step Account Verification

Enroll your account

  1. Review the Google 2-step verification features and then...
  2. Get started with Google 2-step verification by enrolling now. Please go through all of the setup steps from Google!
  3. Riverdale recommends setting up 2-step verification with Google Prompts or an authenticator app like Google Authenticator (iOS, Android) and not SMS
    • By default during the set-up process, you will be asked for a phone number
    • Instead of entering your phone number, click Choose another option
    • Set up Google Prompts or Google Authenticator as your primary authentication option
    • You can always add/remove/change these later!

Google Authenticator App

If you set up 2-Step Verification, you can use the Google Authenticator app to receive codes. You can still receive codes without internet connection or mobile service. Click Here.

Get Backup Codes

If you don't have access to your primary or backup phones, you can sign in with a backup code. To get your backup codes,

  1. Go to your 2-Step Verification settings page.
  2. Click on Show/Generate codes.
  3. Store this code in a secure location, such as your home safe or a safety deposit box.

Set up a backup phone

If your primary phone is ever unavailable Google can send a code to a backup line, like your home or work phone or even a family member's phone. To set one up:

  1. Go to your Google 2-Step Verification settings page
  2. Click on Add a phone number in the Backup phones section

Creating application specific password for Google 2-step verification

Once you have done the 2-step verification setup, and using Gmail on Outlook or on iOS devices, you will get errors saying “Wrong password”. All you need to do is, create one time Application specific password, and use it to setup your Gmail account on iOS or other mail clients you are using. Application-specific password required..

  • POP and IMAP email clients such as Outlook, Mail and Thunderbird
  • Gmail and Google Calendar on smartphones
  • ActiveSync for Windows Mobile and iPhone

Using apps with 2-Step Verification Video

Example Usage

  1. Log into your RCS Google Account using your RCS username and password
  2. Respond to the MFA prompt to gain access to your account typically by doing one of these two steps
    • Enter a 6-digit code that will be sent to you via Google’s mobile app called Google Authenticator (available on iOS and Android) or through text and voice call
    • Respond to a prompt on your mobile device if you have any Google apps installed and logged-in to your RCS Google Account

You can choose to trust your computer when you enter the code. This means you won't be asked for a code again when you sign in from this computer. If you sign in from another computer, however, you’ll be asked for a new code.

What could go wrong?

Common questions about 2-Step verification

Can I do 2-step authentication with my personal Gmail account too?

Yes! We encourage you to do so right away. The Google Authenticator app can be used for many accounts, not just Google ones. LastPass 2-factor authentication can use the Google Authenticator app, as an example.

When do I need to enter a verification code? Do I need to enter the code every time I sign in?

You need to enter a new code every 30 days or after deleting your web browser's cookies. On the sign in page, click the option to "Remember verification for your computer" on your computer, and you won't have to re-enter your code for 30 days. Do not select this option for a public computer, such as a shared computer in an Internet cafe. The verification code is used only to sign in to your Google Apps account and not any other of our company's applications.

Will my Riverdale.edu password change?

No, your password stays the same while you are enrolling in 2FA.

What if I don't have my mobile phone when I need to sign in or I have trouble with the codes?

During the setup process, you will receive codes that you can write down and use when you don't have your phone. Otherwise, you can contact RCS Tech Support who can temporarily disable 2-Step Verification.

I just enrolled in 2-Step Verification, and now I can't access email on my phone...

After you enroll in 2-Step Verification, for any mobile devices or desktop applications that stop accessing Google (including IMAP email clients), create an application-specific password and enter it into the device/application instead of your normal password. This is a one-time process, Application-specific passwords.

Using apps with 2-Step Verification