Two-step Login FAQs

This article contains Frequently Asked Questions (FAQs) regarding Two-step Login.

Q: Can I use SMS 2FA?

A: PassageWay does not support SMS 2FA due to vulnerabilities, including SIM hijacking. We do not recommend SMS 2FA for other accounts unless it is the only available method. Any second factor is recommended over having none, but most alternatives are safer than SMS 2FA.

Q: Can I require my Organization’s users to use Two-step Login?

A: You can require your Organization’s users to use Two-step Login by enabling the Two-step Login Policy. Additionally, you can setup Organization-wide Duo 2FA to ensure that all of your users have a secure Two-step Login method at their disposal.

Q: Is FIDO U2F or FIDO2 WebAuthn supported on my iOS or Android App?

A: At this time, due to platform/OS limitations, FIDO is only supported for Web Vaults, Browser Extensions, and Windows Desktop Apps, however we are currently investigating ways to implement this. In the meantime, we recommend enabling another Two-step Login Method for use with unsupported client applications.

Q: Why is PassageWay not asking for my enabled Two-step Login method?

A: In most cases, one of two things is happening:

1. You may be already logged in to PassageWay and only unlocking your Vault. Two-step Login is required to Log In but not to Unlock your Vault. For more information on the difference between Logging In and Unlocking, see Vault Timeout Action.

2. You may have previously checked the Remember me checkbox on a device when accessing your Vault using Two-step Login.

   

   If you used the Remember me option, you will need to Deauthorize Sessions from your Web Vault (Settings → My Account) for that device to continue asking for your Two-step Login method.