Two-Factor Authentication

Two-factor authentication (2FA) requires a second credential beyond your password when you sign in to ALTR. ALTR supports these methods:

• Authenticator app — time-based one-time passwords (TOTP) from a standard authenticator app such as Google Authenticator or Authy.
• SMS — a one-time code sent by text message to the phone number on the account.
• Email — a one-time code sent to the email address on the account.
• Passkey (WebAuthn) — a platform authenticator such as Touch ID, Windows Hello, or Face ID, or a hardware security key.

Passkey-based two-factor authentication is built on the WebAuthn standard.

Note

Passkey registration and use require a browser that supports the WebAuthn API.

Note

Administrators who authenticate through SSO aren’t prompted for a 2FA code. ALTR defers authentication to the configured identity provider. See SSO and SCIM for how SSO affects sign-in.

To select the 2FA methods available to your organization, or to change your own method, see Settings and Preferences. If you use email-based 2FA and aren’t receiving codes, see Ensuring ALTR Emails Reach Your Inbox.