What is Two Factor Authentication?

Two Factor Authentication (2FA) adds a layer of security to logging into your account.

On any website, if someone knows your email address and guesses your password, they will be able to log into your account. If you use the same password across multiple websites, then any data-breach from another website could allow nefarious users to find out your commonly used passwords. It's important to remember that bitcoin transactions are IRREVERSIBLE. If someone else gets access to your account and withdraws the bitcoin from it, there is nothing anyone can do to rectify the situation.

Hardblock recommends using a strong and unique password for your Hardblock account. See our podcast episode on password managers for more details.

Using 2FA with Hardblock means that you must enter a one-time code generated in your phone app to log into your account, meaning that for someone to access your account they must physically have access to your phone and be able to unlock it. While 2FA is much more secure than a password, it is not a perfect solution (consider what would happen if you lost your phone). For this reason, we recommend against storing funds in your Hardblock account for long periods of time. For long-term storage, consider setting up your own self-custodial bitcoin wallet, and you can check out our service Guardblock (https://guardblock.com/) for help with your bitcoin security.

Remember, if you lose your phone or don't have it with you, you will be unable to log in to any account where you have set up 2FA. Keep this in mind, especially if you switch to a new phone, as the 2FA is linked to the device it is set up on, not to your phone number. If that happens, we have a procedure for you to regain access to your Hardblock account.


Setting Up Two Factor Authentication


To set up 2FA, you need to download an Authenticator app on your phone. There are many options out there, be sure to use one from a legitimate source. Some suggestions are:

  • Google Authenticator (iPhone & Android)
  • Aegis (Android)
  • Bitwarden Authenticator
  • Proton Authenticator

The process for each is similar, but the guide below is done using Google Authenticator.


Setting up Google Authenticator


  1. Download Google Authenticator
  2. Open the App
  3. Log in to your Hardblock account
  4. Navigate to 2FA setup found on your Settings page: https://www.hardblock.com.au/account/settings/2factor
  5. In the Google Authenticator App: Click the + icon in the bottom right corner
  6. Choose either:
    1. "Scan a QR Code": Hold your phone and scan the QR code on the screen on the 2-Factor page of the Hardblock website
    2. or "Enter a setup key": Enter the Secret Code from the 2-Factor page of the Hardblock website into the "Your Key" field. Be sure to label the account in "Account Name" (eg Hardblock)
  7. You will now see a six digit code under Hardblock (or the name you chose). This code has a timer next it and is only valid while it is shown on your phone screen.
  8. In your Hardblock account, on the 2-Factor page, enter the code from Google Authenticator into the "Enter Token" field and click "Verify Token".
  9. Next time you log in to your Hardblock code, you will need the code from the Google Authenticator app to complete the log in process. 2FA codes are also required to make certain other actions, such as submitting bitcoin transactions from your Hardblock account.

Help


If you no longer have access to your 2FA device, see this article.

Alternatively, email us at support@hardblock.com.au

Still need help? Contact Us Contact Us