Information included in the article

• Configure two-factor authentication 
• Two-factor authentication at device connection
• Disable two-factor authentication 

Configure two-factor authentication 

Two-factor authentication for your IDrive BMR device interface enhances security and prevents unauthorized access. When enabled at device connection, you will be required to enter a verification code sent to the primary email address/your phone number/TOTP application on your mobile device in addition to the password.

To manage two-factor authentication during your initial sign-in,

1. Connect to the IDrive BMR device interface.
2. Enable Two-factor authentication at device connection if required.
   Two-factor authentication is mandatory and enabled by default for critical operations such as deleting recovery points, deleting network shares, removing machines, performing manual cleanup, updating primary email address, changing password  and updating time zone. 
3. Select Email address or Phone number for the code verification process and click Confirm. In case you select Phone number, enter your phone number and click Send Code.
   
   
   
   Alternatively, you can select Time-based OTP authentication as your preferred method of receiving the code.
4. Enter the one-time authentication code sent to the admin email address/phone number/TOTP application on your mobile device and click Verify & Enable. The two-factor authentication feature will be enabled.
   
   You can manage your two-factor authentication settings by navigating to Settings > Security > Two-factor Authentication.

Two-factor authentication at device connection

To connect to a device after two-factor authentication is enabled,

1. On the device connection screen, enter the password and click Connect.
   You will be prompted to enter a verification code shared on the admin email address/your phone number/TOTP application on your mobile device.
2. Enter the code.
3. Click Verify. You will be signed in.
   
   

Disable  two-factor authentication 

Two-factor authentication can be disabled at device connection but is mandatory for all critical operations.
To disable email address/phone number based two-factor authentication two-factor authentication at device connection,

1. Connect to the IDrive BMR device interface.
2. Go to Settings > Security > Two-factor Authentication.
3. Move the Two-factor authentication at device connection option to the Disabled position.
   
   
   
   Two-factor authentication will be disabled and you will only require device password for all future connections.

To disable TOTP-based two-factor authentication at device connection using recovery code,  

1. Connect to the IDrive BMR device interface.
2. In the verification code screen that appears, click the link I can't access my code. The Deactivate Time-based OTP authentication window appears.
   
   
   
   
3. In the Recovery Code field, enter the recovery code received while configuring two-factor authentication for your device interface.
4. Click Deactivate. Two-factor authentication will be disabled for your IDrive BMR device interface.
   
   
   
   When you disable Time-based OTP authentication, mandatory two-factor authentication will revert to using your primary email address as the method for authentication.