Attribution Analytics implements two-factor authentication for your account login because it helps confirm your identity and protect your account against unauthorized access. With two-factor authentication, you have an additional layer of security that protects your account from being accessed even if your account password is compromised.
Without two-factor authentication, you sign into Attribution Analytics using your email address and a password. But if your password is compromised, then those that have your password can login as you, access your personal information, and perform actions that can negatively affect your business.
However, with two-factor authentication enabled for your Attribution Analytics account, your password is no longer sufficient for gaining access to your account! Two-factor authentication requires you to enter an additional authentication code (after you enter your password) before you can access the Attribution Analytics system and interface.
The additional authentication code is not simply another password that is permanently saved somewhere, waiting to be compromised. The authentication code is a randomly generated six-digit number based on an encrypted seed value that is unique to you, gets created on-the-fly when you request it, and expires after 30 seconds (at which point a new code is generated).
In addition to the dynamic nature of the code itself, you can only obtain these codes on your mobile device through the Google Authenticator mobile app. So if a malicious user manages to compromise your login information, they still cannot login to Attribution Analytics unless they also have access to your mobile device (for the additional authentication code that supplements your username and password).
Unlike traditional passwords that you can use perpetually, these authentication codes are only valid for one session (if you logout of your account, then you need a new code to log back in again).
Before Enabling Two-Factor Authentication
- Configure your Google account for two-factor authentication. If you have not already done so, please complete Google’s 2-Step Verification Tutorial.
- Download and install the Google Authenticator app on your mobile device; this mobile app is a free download for Android, iOS and Windows Phone.
- After you install the app, enable two-factor authentication and pair your mobile device/Google Authenticator app with your Attribution Analytics account.
Enabling Two-Factor Authentication
- On your computer, login to Attribution Analytics as shown in the following screenshot.
- In the navigation (on the left side), under the Accounts section at the bottom, click Advertiser Account, and then click the Two-Factor Authentication tab and click Enable as shown in the following screenshot.
- Attribution Analytics prompts you to setup two-factor authentication as shown in the following screenshot.
- On your mobile device, launch the Google Authenticator app and scan the barcode displayed in Attribution Analytics (on your computer). This step links Attribution Analytics with the Google Authenticator app (effectively enabling two-factor authentication for your Attribution Analytics account). You do not need to download an additional app to scan the barcode displayed on your computer because the Google Authenticator app includes a built-in QR code scanner.
- The Google Authenticator app generates an Authentication Verification code (that you enter in Attribution Analytics to complete login) as shown in the following screenshot.
- On your computer, enter the authentication code into the Authenticator Verification field in Attribution Analytics as shown in the following screenshot. (you have 30 seconds to activate the code before it changes).
- After you configure two-factor authentication in Attribution Analytics, the button text label changes from Enable to Disable as shown in the following screenshot. (Do NOT remove two-factor authentication as doing so removes the extra layer of security)
Congratulations! Your Attribution Analytics account is now protected with two-factor authentication. Please keep in mind:
- You must login with a Google account (for example, a Gmail account) to use this service.
- Your Google account must be setup for 2-step verification before you implement this service in Attribution Analytics. If you have not already done so, please complete Google’s 2-Step Verification Tutorial.
- At each unique login, Attribution Analytics requires you to provide an authentication code.
- Logging into your Attribution Analytics account requires you to have access to your mobile device (to retrieve your code from the Google Authenticator app).
If you lose your mobile device, please contact [email protected] so they can help you access your account.