Security & 2FA

Protect every account and your whole organisation with stronger sign-in.

Two-factor authentication

Two-factor authentication (2FA) adds a second step at sign-in using an authenticator app. Even if a password is guessed or stolen, an attacker still cannot get in without the one-time code from the user's phone. We strongly encourage every user to turn 2FA on.

Enforcing 2FA across your organisation

As an administrator, you can enforce 2FA for the whole organisation. When enforced, every user must set up 2FA before they can continue using PilotVantage — so protection is consistent rather than optional.

Recommended

Enforcing 2FA organisation-wide is one of the simplest, highest-impact steps you can take to secure your accounts.

Setting up 2FA

Open your security settings

Go to your profile and open the security or two-factor authentication section.

Scan the QR code

Open an authenticator app on your phone and scan the QR code shown on screen.

Enter the code

Type the six-digit code from your app to confirm. From now on you enter a fresh code each time you sign in.

Protection against brute-force attempts

PilotVantage automatically locks an account after repeated failed sign-in attempts. This blocks brute-force attacks that try to guess passwords, without you having to do anything.

Lost your device?

If a user loses the phone with their authenticator app, an administrator can reset that user's 2FA so they can set it up again on a new device. See Users & Roles.

Related: manage accounts, invitations and 2FA resets in Users & Roles.