Login and second factor
My account
Section titled “My account”Clicking your email address at the top right opens My account. There, in the tabs Profile, Password and Two-factor, you change your name, your email address, your password and the second factor. You confirm a new email address with a code sent to the new address.
In the header you can also switch the language (German/English) and the appearance (light/dark).
Setting up a second factor
Section titled “Setting up a second factor”A second factor protects your account even if someone knows your password. Available, if the installation allows them:
- Authenticator app – such as Google Authenticator, Microsoft Authenticator or an app of your password manager
- Email – a code sent to your login address
- My account → Two-factor.
- Set up authenticator app: scan the QR code with the app and enter the code shown. Or Set up e-mail: enter the code from the test email.
- When setting up the app, recovery codes appear. Note them down now; they are not shown again. You use one of them to log in if your phone is lost.
At login, after the password, SmartFleet asks for the code from the app, by email or a recovery code.
Requiring two factors for everyone
Section titled “Requiring two factors for everyone”Under System Administration → Security an owner defines:
| Setting | Effect |
|---|---|
| E-mail 2FA available | users may choose email as their second factor |
| Authenticator app 2FA available | users may choose an authenticator app |
| Enforce 2FA | every user without a second factor gets email as their second factor, retroactively as well, and can no longer switch it off. Anyone who has set up an app keeps it. |
Forgotten password
Section titled “Forgotten password”On the login page, Forgot your password? leads to a form. After entering the email address, a reset link arrives that is valid for 15 minutes. If the address is unknown, the page does not reveal this.
An owner can also set another user’s password directly, see Users and roles.
Too many failed attempts
Section titled “Too many failed attempts”After several wrong entries, login slows down for a while. The throttle applies per origin, so that an attacker cannot lock you out of your own server. If they manage it anyway, the emergency access helps.