# 2FA Authenticator best practices

> 1. Enforce 2FA for all administrative accounts Administrative users typically have elevated privileges within NIZU WorkSpace Cloud. Always enable Two-Factor Authentication (2FA) for every admin accou…

- Page: https://dashboard.nizu.io/knowledge_base/view/82-2fa-authenticator-best-practices
- Part of: [Knowledge base](https://dashboard.nizu.io/knowledge_base/llms.txt) on NIZU — https://dashboard.nizu.io/llms.txt
- Updated: 2026-10-25T11:50:03Z

##### **1. Enforce 2FA for all administrative accounts**

Administrative users typically have elevated privileges within NIZU WorkSpace Cloud.

Always enable **Two-Factor Authentication (2FA)** for every admin account to prevent unauthorized access, even if a password is compromised.

This small measure significantly enhances overall platform security.

---

##### **2. Encourage clients to activate 2FA voluntarily**

While 2FA can be optional for clients, encouraging them to enable it strengthens the security of your ecosystem.

Provide brief guidance or a reminder in the client portal login page or welcome emails to promote adoption.

---

##### **3. Use time-synchronized devices**

2FA relies on **Time-based One-Time Passwords (TOTP)**.

Ensure that all users especially administrators keep their mobile device clocks synchronized automatically via the network.

This prevents “invalid code” errors and reduces authentication friction.

---

##### **4. Maintain secure recovery and reset procedures**

2FA recovery requests should always be **approved by a trusted administrator**.

Avoid automated resets without verification to prevent potential social engineering attacks.

Each reset should be logged and auditable through the **Security Logs** in the admin panel.

---

##### **5. Regularly review user 2FA status**

Administrators should periodically check which users have 2FA enabled.

Use the **Security Dashboard** or **User Management** module to identify accounts without 2FA, and enforce enrollment where necessary.

---

##### **6. Educate users on backup and recovery options**

Encourage users to safely store **backup codes** (if enabled) or link their Authenticator App to a cloud account that supports secure recovery.

This ensures minimal disruption if a device is lost or replaced.

---

##### **7. Keep your Authenticator App up to date**

Authenticator apps are security tools, and updates often include improved encryption or protection mechanisms.

Always run the latest version of your chosen Authenticator (Google Authenticator, Microsoft Authenticator, Authy, etc.) to benefit from the latest security enhancements.

---

Adding this section creates a complete end-to-end documentation piece from **setup and operation** to **support and security best practices** giving both admins and users clear, actionable knowledge.