The Layer supports two-factor authentication as an optional additional layer of security for your customer data.

Two-factor authentication adds an extra layer of protection to your account, with a verification code communicated to your users via email, SMS or voice call. Enabling two-factor authentication requests trust for each computer and user sign in but will only ask for verification code every 30 days, meaning it isn't too inconvenient for your users.

N.B. It's important to ensure that your users have valid mobile and desk phone telephone numbers stored against their account. This can be updated in the user's personal profile or via the users area of the settings zone.

Setting up two factor authentication is easy:

Select a mode for notification for two factor authentication.

When the user logs into the app, they'll be contacted by the selected method and asked to enter a security code.

This is only requested once per browser/user combination every 30 days.

For more information on how this works from a technical standpoint, check this article.