Two-Factor Authentication (2FA) for My Rochen

The My Rochen customer portal supports Two-Factor Authentication (2FA) and we strongly encourage all customers to enable 2FA to further enhance the protection of your account. When 2FA is enabled you will have to enter a code from your chosen Authenticator App to complete the login process.

When enabling 2FA it is important to store your secret Backup Recovery Key in a safe location. This secret key will be required to reset 2FA and regain access to My Rochen if you lose access to your Authenticator App.

Enable Two-Factor Authentication (2FA)

To enable 2FA please follow these steps –

1. Login to the the My Rochen customer portal, click “Account Settings” from the left menu and then the “Manage 2FA” option from the drop down. Users with limited access to My Rochen can access this page by clicking their name in the top right and then “Manage 2FA” from the drop down.
2. Open your chosen Authenticator App and scan the QR Code shown on the page. Alternatively, you can enter the Setup Key shown into the app manually. Your Authenticator App will then provide you with a 6-digit code to enter into the code box shown on the “Manage 2FA” page in My Rochen.
3. Click “Enable 2FA”.
4. On the confirmation page you will be shown your secret Backup Recovery Key. It is important that you store this one-time secret key in a safe location as it will be required to reset 2FA and regain access to My Rochen if you lose access to your Authenticator App.
5. 2FA is enabled and you will now be required to enter the code shown in your Authenticator App as part of the My Rochen login process.

Reset Two-Factor Authentication (2FA)

If you have lost access to your Authenticator App and need to reset 2FA please follow these steps –

1. Login to the My Rochen customer portal as normal.
2. You will then be asked to enter the code from your Authenticator App. Instead of entering this code click the “Reset Two-Factor Authentication” link.
3. Enter the one-time secret Backup Recovery Key provided when you originally enabled 2FA and click “Reset”. 2FA will now be disabled and you will regain access to your account.
4. It is important to now enable 2FA again as soon as possible to ensure enhanced protection.
5. Please note, when enabling 2FA again you will be provided with a new Backup Recovery Key so it is important to store this new secret key safely and destroy your old key.

If you have lost access to your Authenticator App and also misplaced your secret Backup Recovery Key then please contact another member of your account with administrator privileges. The administrator can reset 2FA on your behalf by going to “Account Settings” and then the “Account Contacts” page in My Rochen. If you do not have an administrator with access then a manual reset of 2FA will be required. Please note, extensive documentation will need to be provided for authentication purposes and the process may take several days to complete. Please see how to Manually Disable 2FA if necessary.

Popular Authenticator Apps

The My Rochen customer portal uses time-based one-time password (TOTP) as specified in RFC 6238 to manage 2FA. You can choose any Authenticator App that supports this industry standard. Here are some popular Authenticator Apps you may wish to consider but there are other options available.

• Google Authenticator for iOS or Android
• Microsoft Authenticator for iOS or Android
• Most major password managers such as 1Password for both desktop and mobile