This guide is for Employees.

Two-factor authentication (2FA) adds an extra layer of security to your Breathe account by requiring an additional step during the login process, typically involving a second device like a mobile phone, to verify your identity.

In this article, we'll show how you can enable 2FA along with instructions on setting it up to enhance the security of your Breathe account.

An overview of how this works is shown below:

Enabling 2FA

If 2FA is enforced by your HR Team at the account level, it becomes mandatory for signing in to your Breathe account.

However, you can still choose to enable 2FA in your user preferences if not enforced at the account level. This can be done by navigating to your profile > User preferences > Enable the 2FA toggle.

Setting up 2FA

Step 1: Sign in to Breathe

After 2FA is enabled, upon signing in to your Breathe account, you'll receive 2FA set-up instructions, including a QR code to scan and a user code to enter.

Additionally, ensure no previous Breathe accounts exist in your authenticator app before starting the setup process. Conflicts with old accounts can cause issues while scanning the QR code or entering the user code.

Step 2: Download and access an authenticator app

Once 2FA is enabled, you must download an authenticator app on your mobile device (e.g., Microsoft Authenticator, Google Authenticator, Twilio Authy). These apps can be found on the App or Google Play store.

Twilio Authy is particularly recommended for its reliability and seamless integration with Breathe.

Don't have a mobile device? See the FAQs section below.

Step 3: Scan the QR code

Open your authenticator app, scan the QR code from Breathe, and follow any provided instructions within the app to add your Breathe account.

Before scanning, ensure there are no old or duplicate entries of your Breathe account in the authenticator app.

Step 4: Enter the authentication code

Enter the Breathe authentication code into the user code field when signing in to Breathe.

If an error occurs, ensure the code is promptly used after it is generated. This will confirm that your setup is aligned with the expected process and helps validate successful setup.

Every subsequent login will require your username, password, and the code from your authenticator app.

Troubleshooting Persistent 2FA Issues

If you continue experiencing issues logging in:

Remove any old Breathe accounts from your authenticator app before adding a new one.
Sync your device’s time settings to ensure they are accurate.
Retry the setup steps, ensuring you scan the QR code and use the freshly generated code.
Consider using Twilio Authy instead of other authenticator apps for improved reliability.

FAQs

Q: I can't scan the QR code

A: You can use the 'Can't scan QR code' button to get a setup key.

On your Authenticator app, you will be prompted to type your full email address along with your setup key (hyphens not required).

This is an example code and you will need to enter the code that is populated for you:

D52QD-NSFKS-RRPNR-SPYGM-QQQY3-HLSUQ-UXQ6O-4TKV2-DGYUG-ZFS7M-KA

If you are prompted for a key type, select 'Time based'.

Q: I've got a new device - how do I log in?

A: Contact your HR team to reset your 2FA on your Breathe profile. You'll then need to set it up again on your new device to log in. Before setting up 2FA on the new device, remove any existing Breathe accounts from your authenticator app. Use the browser version of Breathe rather than the mobile app for the reset process.

Q: Why is my 2FA code from my authenticator app not working on Breathe?

A: Your 2FA code may not be working due to the time zone settings on your mobile device. If your mobile device's time zone is not set to automatic or is set incorrectly, it can cause your device to be out of sync with the generated 2FA code.

To resolve this issue, set your mobile device's time zone settings to automatic and attempt to enter the 2FA code within Breathe again.

If you're still encountering difficulties with Microsoft or Google Authenticator, we would recommend using the Twilio Authy app instead.

If you're still experiencing difficulties, consider using alternative authenticator apps that are compatible with Breathe, such as Twilio Authy, for a more seamless experience.

Q: What if I cannot download an authenticator on my mobile device?

A: You can download an authenticator to your PC or through your browser via an extension. Here are some examples: