We have now released two-factor authentication (2FA) to add an extra layer of security to your GivePanel account. You can use SMS 2FA, an Authenticator App or both.
How To Use SMS Two-Factor Authentication
You can set up SMS two-factor authentication in a few simple steps:
An admin of your GivePanel account will need to head to the '"Account Settings'' tab (accessed by clicking on your nonprofit name in the top right of your account and then selecting ''Account Settings'').
An ''overview page'' will open up and over on the right, there is a section titled ''two-factor authentication''.
Select ''Enable SMS authentication for all users''
Once selected, all users will see the below screen when they next go to log in. Users will need to enter their phone number (or click "Do this Later" to go to your GivePanel home page):
If they enter a phone number, they will receive a code via SMS. They will need to input the code from the text that they receive and click "Continue".
SMS 2FA is now active. Now when you log in, you will be asked to add in the code sent to you via SMS.
What If I Want To Edit The Phone Number Being Used For SMS Two-Factor Authentication?
Navigate to your GivePanel "Account Settings" and then click "Users".
Scroll down to your user and select it. Here you will see the option to ''Change 2FA Settings''. Once clicked, you will be given the option to change the phone number used for SMS 2FA.
How To Use an Authenticator App for Two-Factor Authentication
You can set up an Authenticator App in a few simple steps:
An admin of your GivePanel account will need to head to the '"Account Settings'' tab (accessed by clicking on your nonprofit name in the top right of your account and then selecting ''Account Settings'').
An ''overview page'' will open up and over on the right, there is a section titled ''two-factor authentication''.
Select ''Enable Authenticator App for all users''
Once selected, all users will be prompted to scan a QR code to add GivePanel to their Authenticator App of choice (e.g. Google Authenticator or Microsoft Authenticator) when they next log in (see image below)
Moving forwards every time your users log in they will be asked to enter an authentication code to log in after they enter their password. Users can choose 'Don't ask again for 30 days' to snooze the authentication code request. There is no option to skip the set up of the Authenticator app once enabled on your account.
Important things to note
You can enable both SMS and Authenticator app. SMS will always come first, then the Authenticator app
You can also enable them individually
If you have any questions or suggestions please reach out to [email protected]. We love to hear from you and value your feedback!