Two-Factor Authentication

Two-factor authentication (2FA) is designed to prevent unauthorized users from gaining access to an account or computer system with nothing more than a stolen password.

SureDrop utilises 2FA in two ways:

  1. A customer chooses a Team-wide policy, making it mandatory for all user accounts to use 2FA

  2. Individually, where an authorised user can set-up 2FA for their own account

A user with administrative privileges must first implement 2FA for their own account before 2FA can be set as required for all Team accounts.


2FA is enabled using the following screen.


Multi-factor authentication (MFA) is restricted to local users only. All external (federated) users manage their MFA with an identity provider such as Azure AD, Windows Server Active Directory or Safenet Trusted Access.

If 2FA is activated on a company wide basis, SureDrop prompts System Administrators about resetting local user accounts which don’t have MFA turned on.

SureDrop administrators can view, filter and sort users based on the status of MFA.