A2P 10DLC Campaign Vetting Delays: Twilio cannot approve 10DLC Campaigns ourselves, and must rely on third parties who control our connections to carriers to sign off. These external processes are creating several week delays for our customers. We continue to escalate these issues and are working to reduce delays wherever possible. Further details will be shared in the Campaign Vetting Changes article as they become available.

Setup Twilio two-factor authentication (2FA) in a TOTP Authenticator app

Two-factor authentication (2FA) is a security feature that requires you, the user, to provide two means of identification in order to access your account. For Twilio accounts, this would include your standard login credentials (email address and password), as well as a randomized verification code sent to your phone (via a call, SMS message, or a TOTP authentication app). This guide explains the TOTP authenticator app requirements, and how to setup Twilio 2FA.

2FA authentication app support

Twilio's 2FA account security feature is powered by Time-Based One-Time Passwords (TOTP), a common method for generating expiring verification codes. Twilio 2FA is supported on any authentication apps that comply with the TOTP standard. Popular TOTP authenticator apps include apps from Google, Microsoft, and our own free Authy app.

Which 2FA app should I use?

We recommend using the Authy app as the most secure and convenient method for 2FA, trusted by hundreds of customers and top-rated in the app store. Some alternatives are discussed in the Wirecutter's article on the Best two-factor authentication app (thewirecutter.com).

Prerequisite: Install your authentication app

Before you get started, you'll need to download and install the authenticator app of your choice. For help getting setup, please see the app vendor's support site.

Setup 2FA on your TOTP authentication app

Once your authentication app is installed and setup, you're ready to add your Twilio 2FA account:

  1. Access the User Settings page in Console.
  2. If the User Settings page is gray, you may need to re-authenticate. Click Authenticate to make changes at the bottom of the screen, and then verify your credentials again to continue.
    Authenticate_450px.png 
  3. Scroll to the "Enable Two-Factor Authentication (2FA)" section, and then select the one of the desired 2FA enablement options. Click Update 2FA Settings to save your selection.
    2020.04.28_2FA_01_450px.png 
    • Once per computer: Request verification to validate a single computer every 30 days.
    • Every log-in: Request verification every login attempt.
  4. Scroll to the "Two-Factor Authentication (2FA) Methods" section, and then select TOTP authenticator app. Click Update 2FA Method to save your selection.
    Totp.png 
  5. A Twilio QR code will be displayed in the browser. Open your authenticator app, and then begin the add account dialog.
    Note: For help adding an account in your authenticator app, please see the app vendor's support site.
  6. From the authenticator app, select the option to scan a barcode or QR code. Then, scan the Twilio QR code displayed in your browser with your authenticator app. Click Continue when finished.
    QRCode.png 
  7. A verification code confirmation will be displayed in the browser. Enter the verification code from your authenticator app, and then click Verify.
    Verifycode.png
  8. Users enabling 2FA for the first time will see a recovery code displayed in the browser window. Saves this codes, as you'll need it to recover access to your account if you ever lose access to your 2FA authentication app.
    recoverycode.png 

That’s it! You are now secured with two-factor authentication (2FA). Every time you log in to Twilio (or log in from an unrecognized device, depending on your chosen security level), you will be prompted to enter the verification code shown in your app.

 

Related Topics

Have more questions? Submit a request
We can’t wait to see what you build.
Powered by Zendesk