2FA (Two-Factor Authentication) Setup Guide
Learn how to set up and use an OTP (One-Time Password) to enhance your account security.
📋 Overview
2FA (Two-Factor Authentication) is a security feature that verifies your identity through a separate authentication device (such as a smartphone) in addition to your password. GIIP strongly recommends all administrators use 2FA to prevent security incidents.
🛠️ Setup Steps
1. Navigate to Security Settings Menu
After logging in, go to the [Profile Icon] in the upper right > [Account Settings] or [System Management] > [Security Settings] menu.
2. Select Enable 2FA
Click the 'Enable' button in the [Two-Factor Authentication Setup] section.
3. Install App & Scan
- Install Google Authenticator or Microsoft Authenticator from your smartphone's app store.
- Select 'Scan a QR code' in the app and scan the QR code displayed on the screen.
4. Enter Authentication Code
Enter the 6-digit number generated in the authentication app into the input field on the GIIP screen and click [Verify].
5. Save Recovery Codes (Important)
Separately save the Recovery Codes displayed on the screen in a safe place (e.g., document tool, offline) in case you lose your device.
🔍 How to Use During Login
- Enter your ID and password.
- When the Two-Factor Authentication screen appears, open the authentication app on your smartphone and enter the currently displayed 6-digit number.
💡 Frequently Asked Questions
- I lost my device: Log in using the recovery codes you saved in advance, then reset your 2FA.
- The code is incorrect: This can happen if the time on your smartphone does not match the server time. Run 'Time correction for codes' in the app settings.
🩺 Troubleshooting
| Symptom | Cause | Solution |
|---|---|---|
| The 6-digit code is entered correctly but keeps being rejected | The smartphone clock is out of sync with the server (clock drift) | Run 'Time correction for codes (time sync)' in the authenticator app settings and set your smartphone to 'Automatic date & time'. |
| Cannot open the authenticator app after losing or replacing your phone | The OTP seed was lost when the device changed | Log in using the recovery codes you saved earlier, then re-register 2FA under [Security Settings]. |
| You also lost the recovery codes | All backup methods are gone | Login is no longer possible; contact your GIIP administrator to verify your account and reset 2FA. |
| The QR code will not scan | Screen brightness too low or the QR failed to load | Increase screen brightness and reload the page, or type the manual setup key shown below the QR code directly into the app. |
Version: 1.0
Last Updated: 2026-03-19
Source: giipv3/public/help/2fa-setup.en.md