Multi-factor authentication

Dataplicity supports time-based one-time passwords and WebAuthn credentials such as security keys and platform passkeys.

Manage authenticators from the Multi-factor authentication section of your account.

Enrol an authenticator app

1. Open your profile security settings.
2. Choose the authenticator-app option.
3. Scan the QR code with your authenticator or enter the setup secret.
4. Enter a current code to complete verification.
5. Sign out and test the next login before ending your existing session.

Codes depend on accurate device time. If every code fails, enable automatic time synchronisation on the device that generates them.

Enrol WebAuthn

1. Choose the security-key or passkey option.
2. Follow the browser prompt to create the credential.
3. Give the credential a recognisable name.
4. Test it in a separate signed-out browser session.

WebAuthn requires a compatible browser and authenticator. Platform passkeys can depend on the operating system account or synchronisation service.

Recovery and removal

Enrol more than one factor when your policy permits it. Before deleting a factor, confirm another login method works. If all factors are lost, contact support@dataplicity.com without sending a password, MFA code, or reset link.

Review login history after an unexpected challenge. Change the account password, remove unrecognised factors, revoke exposed API keys, and notify an organisation administrator if compromise is possible.

Organisation SSO policy and personal MFA are separate controls. Follow the identity provider's MFA policy when SSO is mandatory.

Related

• Sign in to Dataplicity
• Reset a forgotten password
• SSO and SCIM
• Teams and roles
• Security model