Using Two-Factor Authentication

Constant Contact supports and recommends two-factor authentication, as it vastly improves account security. Constant Contact's two-factor authentication works together with applicable authenticator applications to generate a security token. When passwords and security tokens are used together, it becomes much more difficult to lose control of an account. 

This article will detail how to configure and use two-factor authentication for Constant Contact Lead Gen & CRM accounts. 

---

Article Contents

• Requiring Two-Factor Authentication for All Users
• Individually Enable Two-Factor Authentication
• Types of Two-Factor Authentication Methods
• Resetting A User's Two-Factor Authentication
• Disabling Two-Factor Authentication

Available With:

Trial	✓
Essential	✓
Advanced	✓
Ultimate	✓

Toolbar:

Settings

Users:

Administrators	✓
Company Managers	✓
Marketing Managers	✓
Sales Managers	✓
Salespersons	✓
Jr. Salespersons	✓

Requiring Two-Factor Authentication for All Users

Two-factor authentication security tokens provide an additional layer of protection to users' accounts. Administrators can require that all users in their Lead Gen & CRM instance use two-factor authentication. Administrators can also remove the requirement as needed. 

To set a two-factor authentication requirement for an instance, do the following:

1. Click Settings in the left toolbar.
2. Under My Company, click Company Profile.
3. Scroll down to the Security section and set the Require Two-Factor Authentication for All Users toggle to On.
4. Click Save Settings.
   
   

   Click to enlarge.

After enabling two-factor authentication, when you or any other users of the Lead Gen & CRM instance log in again, selecting an authentication method is required. 

Individually Enable Two-Factor Authentication

While administrators can enable two-factor authentication for all users, individual users can also enable two-factor authentication for their own accounts. 

To enable two-factor authentication for an account, do this: 

1. Click Settings in the left toolbar. 
2. Click My Account,
3. Scroll down to the Security section and click Enable, under Two-Factor Authentication.
   
   

   Click to enlarge.

4. In the popup that appears, log in to the Lead Gen & CRM account again.
   
   

   Click to enlarge.

5. Select a security method.
   
   

   Click to enlarge.

You'll use this authentication method when signing in, in the future. 

Types of Two-Factor Authentication Methods

There are four possible authentication methods users can choose from on the next login:

Okta Verify

Download the Okta Verify app (for Android or Apple) to your mobile device. With this method, whenever you are logging into your Lead Gen & CRM instance you'll use the Okta application to verify your identity by approving a push notification that will be sent to your mobile device.

Read Setting Up Two-Factor Authentication: Okta Verify to learn how to enable the Okta Verify method. 

Google Authenticator

Download the Google Authenticator app (for Android or Apple) to your mobile device. With this method, whenever you are logging into your Lead Gen & CRM instance you'll use the Google Authenticator app to verify your identity by entering the one-time code that will be sent to your mobile device.

Read Setting Up Two-Factor Authentication: Google Authenticator to learn how to enable the Google Authenticator method. 

SMS Authentication

Enter your mobile phone number. With this method, whenever you are logging into your Lead Gen & CRM instance you'll receive a text message with a one-time code for you to enter to verify your identity.

Read Setting Up Two-Factor Authentication: SMS Text Message and Call Authentication to learn how to enable the SMS authentication method. 

Voice Call Authentication

Enter your mobile phone number. With this method, whenever you are logging into your Lead Gen & CRM instance you'll receive a phone call where you'll hear a one-time code to enter to verify your identity.

Read Setting Up Two-Factor Authentication: SMS Text Message and Call Authentication to learn how to enable the voice call method. 

Resetting A User's Two-Factor Authentication

In the event users do not have access to their authenticator apps, administrators can reset two-factor authentication for a user.

To reset a user's two-factor authentication, do the following:

1. Click Settings in the left toolbar.
2. Under My Company select User Accounts.
3. Locate the desired user and click   More Options > Reset two-factor authentication.
   
   

   Click to enlarge.

4. Click Reset.
   
   

   Click to enlarge.

Disabling Two-Factor Authentication

If you would prefer to rely on the security that passwords alone provide, you can remove the two-factor authentication requirement for your Lead Gen & CRM instance.

To disable two-factor authentication, do the following:

1. Click Settings in the left toolbar.
2. Click My Account, located under My Account in the left panel.
3. Scroll down to the Security section and click Disable.
   
   

   Click to enlarge.

4. Click Disable once again.
   
   

   Click to enlarge.