Security Settings - Change Password and Enable/Disable 2FA

General Feature Information

Feature Name: 

Security Settings - Change Password and Enable/Disable 2FA

Feature Overview:
The Security Settings feature allows users to enhance account security by managing their password and enabling two-factor authentication (2FA). Changing the password ensures account privacy, while 2FA adds an extra layer of protection by requiring a secondary verification step, making it difficult for unauthorized access.

How to Use the Feature

Step-by-Step Instructions

To Change Password:

1. Go to the Settings tab in your OTO Dashboard.

2. Select Security under Profile Settings.

3. Enter your Current Password in the designated field.

4. Input your desired New Password ensuring it meets the listed requirements:

   • Minimum 8 characters

   • At least one uppercase letter, one lowercase letter, and one number.

5. Confirm the new password by re-entering it in the Confirm New Password field.

6. Click Save to apply the changes.

To Enable 2FA:

1. Navigate to Settings > Security under Profile Settings.

2. Scroll down to the 2-Factor Authentication section.

3. Click Enable 2FA.

4. Follow the on-screen instructions:

   • Download and open the Google Authenticator app on your device.

   • Scan the QR code displayed or enter the manual key provided.

5. Enter the six-digit code generated by Google Authenticator into the verification field.

6. Click Verify to activate 2FA.

To Disable 2FA:

1. Navigate to the 2-Factor Authentication section in Security Settings.

2. Click Disable 2FA and follow the prompts to confirm.

Configuration Details

Prerequisites:

• Ensure you have access to your current password for security changes.

• Download the Google Authenticator app for enabling 2FA.

Troubleshooting and FAQs

Common Issues and Solutions:

• Issue: Unable to save a new password.
  Solution: Ensure your new password meets all listed criteria (e.g., length and character requirements).

• Issue: 2FA code not working.
  Solution: Confirm that your device's time is synchronized to avoid mismatches with Google Authenticator.

FAQs:

• Q: Can I reset my password if I forget it?
  A: Yes, use the "Forgot Password" option on the login page to reset it.

• Q: What if I lose access to my Google Authenticator app?
  A: Use the backup codes generated when you enable 2FA.