Two-factor authentication: a security measure for your account

Life in the world of digital technologies, social networks andInternet bankingIt's appealing for its convenience and functionality. However, standard security procedures, which require only a login and password, make it easier for criminals to access users' personal data.

In this article we propose to talk abouttwo-factorauthentication and the ability to protect your data onNIC.UAeven better. 

What is two-factor authentication?

You've heard the term "two-factor authentication" before. But what does it actually mean? Two-factor authentication, or simply 2FA, is a special technology that requires a user to provide two forms of identification before accessing an account. Without 2FA, a username and password—the only authentication factor—is sufficient. Two levels of security require not only a password but also additional information known to the user, such as a special secret code, a security question, a passport number, or smartphone data. Using a username and password, along with information known only to the user, makes it more difficult to steal personal data and commit other illegal actions.

What are the authentication factors?

Two-factorAuthentication requires the user to have two of three possible types of credentials. Let's look at them:

• The first is the knowledge factor. For example,PIN code, password or answer to a security question.
• The second factor is ownership. This could be a bank card, a mobile phone, or a secret code that only the user has.
• The third is the intrinsic factor, or biometric factor. This is, in fact, the user themselves—their voice or fingerprint.

Using two-factor authentication online

Many popular services already use 2FA, such as Google, Facebook, Twitter, and Apple. When a user attempts to log in from a new device, in addition to their username and password, the service requests a special confirmation code. This code can be received via SMS or push message, voice call, or one of the following:authenticator applicationsThese apps generate one-time passwords for short periods of time—up to 30 seconds. After this time, the code becomes invalid, and the app generates a new set of numbers. Therefore, if the password is stolen, access to the account is impossible without access to the smartphone. The most popular code generator apps are Google Authenticator and Authy.

How do I enable two-factor authentication on NIC.UA?

In December 2017 we proposedtwo-factorWe launched authentication for a select group of clients to test the new feature. Today, two-factor authentication is available to all NIC.UA clients.

On the menu"Settings"In your NIC.UA personal account, you'll find a section for activating 2FA.

To enabletwo-factorTo authenticate, you will need a phone and an app to generate temporary codes -Authy(Android,iOS) or Google Authenticator(Android,iOS).From here on everything is simple:

1. By clicking the "Enable" button, you will see a message with a phone number to which a six-digit code will be sent.
2. Once you enter the received code, a QR code will appear in front of you, which you need to scan using one of theauthenticator applicationsIf the QR code fails to scan, there will be a text code below that must be entered into the app manually.
3. The app on your phone will now begin generating temporary codes. Enter the six-digit code you see on your phone screen into the designated field below the QR code during activation.
4. Ready! Two-factorAuthentication protects the security of your data on NIC.UA.

Please note:The service can be activated if you confirmed your email address when registering on NIC.UA and completed the form in your personal account.

You can disable 2FA at any time in the menu.«Settings»personal account or during authorization on the websiteNIC.UAYou will need an email and phone number to receive confirmation messages.If you do not have access to the phone number or email address provided in the application, please contactsupport service.

We recommend turning it ontwo-factorauthentication as soon as possible. If any difficulties or questions arise, oursupportalways happyhelp :)