Overview
Two-Factor Authentication (2FA) adds an extra layer of security to your account by requiring a second verification step when logging in.
In Custr, 2FA can be enabled in two ways:
Individually by a user (optional)
Enforced by a role (mandatory)
Types of Two-Factor Authentication
1. User-Enabled 2FA (Optional)
Users can choose to enable 2FA on their own account for additional security.
To enable 2FA:
Log into the Custr Dashboard
Click your profile in the top right corner
Go to Your Profile
Enable Two-Factor Authentication
Follow the on-screen setup steps
Once enabled, you will be required to enter a verification code when logging in.
2. Role-Enforced 2FA (Mandatory)
Administrators can require Two-Factor Authentication (2FA) for specific roles.
This is configured within Roles & Permissions and ensures that users assigned to that role must use 2FA when accessing the system.
For example, this may be used for:
Admin users
Fire marshals
Staff with elevated access
How to Enable 2FA for a Role
To enforce 2FA for a role:
Go to Site → Roles & Permissions
Select the role you want to update
Locate: Enforce Two-Factor Authentication (2FA)
Change the setting to Enabled
This setting requires the user to use two-factor authentication to access the dashboard.
Once enabled, all users assigned to this role will be required to set up and use 2FA when logging in.
What Users Will Experience
If 2FA is optional, users can choose to enable it themselves
If 2FA is enforced, users will be prompted to set it up when they next log in
Users will need to enter a verification code each time they sign in
Important Notes
2FA helps protect accounts from unauthorised access
Users cannot bypass 2FA if it is enforced by their role
A valid device (e.g. smartphone) is required to complete setup
If access to the 2FA device is lost, assistance may be required to regain access
Common Questions
Why am I being asked to set up 2FA?
This is likely because your assigned role has 2FA enforced.
Can I turn off 2FA?
If 2FA is enforced by your role, it cannot be disabled by the user.
What if I lose access to my 2FA device?
Please contact your system administrator or support team for assistance.