The GDPR (General Data Protection Regulation) aims to give control to citizens and residents over their personal data. While GDPR does not dictate two-factor as such, there is no doubt that if simplistic passwords are in place, you could be breached (and we don't want that!)

As with any online business, we have a responsibility for our customer's data. So to further strengthen the privacy of our clients at Taxi for Email, we have introduced Two-Factor Authentication.

What is two-factor authentication?

Two-factor authentication (or 2FA) is an extra layer of security for user accounts. How it works is, in addition to a username and password, a user must verify another piece of information to enter their account. Traditionally, this might have been done using something like security questions. It's now best practice to require access to a mobile phone or physical security key that the user has confirmed belongs to them.

What forms of 2FA are available in Taxi?

Taxi currently offers two methods for 2FA:

• Time-based one-time password (TOTP) authentication
• SMS security codes.

You can choose to enable both methods or just one. For organisations that allow both methods, a single user can set up both and choose to authenticate one or the other on each login.

Time-based one-time passwords (TOTP)

This method requires users to download a third-party mobile app. On setup, Taxi presents the user with a QR code to be scanned using the app. On each subsequent login, the user must open the app to generate a code for Taxi and enter it in Taxi's login page before it expires.

Text messages (SMS)

This method requires users to enter a security code sent to their mobile phone via SMS. To set it up, users enter their mobile number and confirm the code they received. A new code will be sent on each subsequent login and must be entered to authenticate the account.