Enable two-factor authentication (2FA)

Availability

Users, Editors, and Admins

All organizations and accounts

One or more features exclusive to select subscription plans or add-ons

Two-factor authentication (2FA) adds an extra layer of protection to your Databox account. It requires two forms of verification: something you know (your email and password) and something you have (a temporary code generated by an authenticator app on your device). By combining these two factors, 2FA makes it much harder for unauthorized users to gain access, even if your password is compromised.

Enable two-factor authentication

Click your profile avatar and select My profile.
Scroll to the Account security section and click Enable 2FA next to Two-factor authentication.
In the Set up two-factor authentication window, open your authenticator app and scan the QR code. If you can't scan it, copy the Setup key and enter it in the app manually.
Click Next and enter the code generated by your app to confirm.
Download your recovery codes and store them somewhere safe. They're how you sign in if you lose access to your authenticator app.

Warning: Your QR code and setup key are the secret behind your 2FA codes. Don't share them or capture them in screenshots — anyone who has them can generate valid codes for your account.

Require two-factor authentication for all users

Account administrators can enforce two-factor authentication for every user in the account. If your organization has accounts, this setting applies only to organization users — account users are not affected.

To require 2FA for all users:

Go to Account Management > Advanced security > Two-factor authentication.
Switch on the Require two-factor authentication for all users toggle.
Confirm in the pop-up by clicking Yes.

Disable two-factor authentication

Click your profile avatar and select My profile.
Scroll to the Account security section and click Disable 2FA next to Two-factor authentication.
Enter your current two-factor authentication code from your authenticator app to confirm.
Once the code is verified, two-factor authentication will be disabled on your account.

FAQ

What if I lose access to my authenticator app?

Sign in using one of the recovery codes you downloaded during setup. Each code works once. If you've used them all or can't find them, contact Databox Support at help@databox.com to verify your identity and regain access.

Which authenticator apps are supported?

Any standard authenticator app that supports TOTP (time-based one-time password) works, such as Google Authenticator and Duo Mobile.