Multi-factor authentication protects WS_FTP Server accounts from unverified users when a user's account password is lost, stolen, or compromised. To verify user identity, WS_FTP Server gives users private access to a uniquely-generated verification code made available to the user by mobile app. This additional verification step ensures user sign in is genuine.

Before you begin, you need a smartphone.

• Smartphone authentication. Install a third-party authenticator app to your smartphone, scan in the QR code that WS_FTP Server generates for you, and get your temporary PIN.

 

To verify your identity using your smartphone or mobile device, you need an authenticator app on that device.

Supported Authenticator Apps

WS_FTP Server works with authenticator apps such as Google Authenticator and Microsoft Authenticator, which is available from most app stores including iTunes and Google Play.

After you install and open your authenticator, you will need to Scan the QR Code.

Tip: WS_FTP Server is compatible with authenticator applications like Google Authenticator or Microsoft Authenticator that implement RFC 6238 (Time-Based One-Time Password) and RFC 4226 (HMAC-Based One-Time Passwords).

When you generate a temporary PIN using the QR code, it is like sharing a secret about your account that only you and WS_FTP Server know. The QR code (or, alternatively the text key) is used to spawn a temporary PIN for you.

Before you begin, you need an authenticator app installed on your smartphone or mobile device.

 

1.	Scan the QR Code	Open an authenticator app (Google Authenticator or equivalent) on a trusted device. Choose 'add' , then choose Scan a Code .
2.	Get the Generated Verification Code	The authenticator app generates a temporary PIN for WS_FTP Server. This PIN is your verification code. Authenticator apps refresh the temporary PIN automatically. It is best to use it right away.
3.	Enter the Verification Code	Type the verification code into the Enter Verification Code text box and click Verify.
	The multi-factor handshake is complete.	You verified your identity to WS_FTP Server by two distinct methods.

Use the Text String Key (Can't Scan the Code)

If your smartphone is low on charge or its camera does not work, you can share the shared secret with the authenticator app as a string of characters.

1. Click Show key link.

   WS_FTP Server presents the text string key you can use instead of the bar code.

2. On your smartphone or mobile device, with Google Authenticator open, click '+' and then chose Enter a provided key.
3. Type the key displayed by WS_FTP Server into Google Authenticator.

   Google Authenticator generates your temporary PIN. This is your WS_FTP Server Verification Code.

At sign in, provide your temporary verification code generated from the authenticator app installed on your smartphone or mobile device.

Smartphone or Mobile App

1. Open your authenticator app and scroll to the verification code for WS_FTP Server.

   To verify your identity using your smartphone or mobile device, you need an authenticator app on that device.

   Supported Authenticator Apps

   WS_FTP Server works with authenticator apps such as Google Authenticator and Microsoft Authenticator, which is available from most app stores including iTunes and Google Play.

   After you install and open your authenticator, you will need to Scan the QR Code.

   Tip: WS_FTP Server is compatible with authenticator applications like Google Authenticator or Microsoft Authenticator that implement RFC 6238 (Time-Based One-Time Password) and RFC 4226 (HMAC-Based One-Time Passwords).

2. Type the verification code generated from your mobile app into the Enter Verification Code text box, then click Verify.

   You verified your identity to WS_FTP Server by two distinct methods. The multi-factor handshake is complete for this session.