What is 2-factor Authentication?

If 2FA is enabled for your PIX account, when you log in, you will enter your username and password as usual, and then be prompted to enter the 6-digit authentication code generated by a third-party application.
 
To obtain a 2FA code, you must download a third-party application to your mobile device or desktop. The application is then linked with your PIX account to provide you with the necessary code to complete your login to PIX. 

PIX does not use SMS text messaging or email for 2FA codes

2FA apps are widely available, providing an additional layer of security for login.
 
Authentication apps can be installed on mobile devices or desktops, depending on the app you choose.
 
Google Authenticator is a commonly used and PIX recommended 2FA app. NOTE: Google has changed the authenticator logo, it now looks like this:  

Other suggested 2FA apps include:

• Authy
• OTP Manager
• Free OTP
• Duo Mobile
• Okta Verify

Other apps can be found by searching app stores.

You can set up your 2FA on the PIX Register Page via a browser, PIX for iOS, or any of the PIX desktop applications. You cannot perform an initial 2FA setup on PIX for tvOS. 

After you download and install a 2FA authentication app, open PIX, and enter your username and password. Click Login.

If 2FA setup is required for your account, you will be prompted to Link your PIX account after you have entered the correct username and password.

Using the “scan barcode” option with the 2FA app, you can use your mobile device's camera to capture the barcode displayed on the screen.

If you are using an authentication app on your desktop and barcode scanning is not available, click ‘Barcode scanning is not available’ to expose a 32-digit authentication key. Using your keyboard, enter the authentication key in your app. 

Your app and PIX account will then be linked. You will receive an email alerting you that a new authentication device has been connected to your PIX account. 

After linking your 2FA app and your PIX account, the app will start generating a 6-digit authentication code. This is the code you will use to log in to PIX.
 
Each authentication code remains valid for 20-30 seconds (this interval may vary by app). When one code expires, the authentication app will automatically generate a new code.
 
After entering your username and password to log in to PIX, enter the valid app-generated code when prompted.

Depending on your project's 2FA settings, you may need to enter a 2FA code upon every login to PIX, or you may have a 2FA grace period, meaning that you may not need to enter the code each time you log in to PIX.

With a grace period, you may only need to enter once every 8 hours, or 24 hours, for example. If you are enabled with a grace period, you will see an option to check the "Remember for X hours" box after you enter your 2FA code into PIX. 

All 2FA requirements including grace periods are determined by the project Gatekeepers. 

If you log in and you are not prompted to scan a barcode but are instead prompted to Enter a 2FA code, this means that you have already set up 2FA for your account, and should have an authentication app already producing a 6 digit code for PIX. 

If you cannot locate your code, or if the code you have is not working,  please reach out to PIX Support as we may need to clear your 2FA so that you can set it up again for your account. 

2FA needs to be cleared if:

• • You get a new device and have lost access to the 6-digit code on your authentication application.
  • Your device is restored.
  • The authentication application is deleted from your device.