> ## Knowledge Base Index > Fetch the complete knowledge base index at: https://help.dropboy.com/sitemap.xml > Use this file to discover available pages before exploring further. > Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash). # Guide: How to setup 2FA for your company - Admin # Two-Factor Authentication (2FA) setup guide **For Administrators** | October 2026 --- ## About 2FA Two-Factor Authentication (2FA) adds a second step to signing in to Dropboy. After your username and password, you also enter a **6-digit code** from an authenticator app on your phone. This keeps your account safe even if someone else learns your password. | Who | What they do | | ---- | ---- | | **Administrator** | Chooses which roles use 2FA in **Role Management** | || **Good to know:** 2FA is **off by default** for all roles. As soon as 2FA is turned on for any role, it is **automatically turned on for the Admin role** too. Turning on a role does not send any email. Each user gets the setup email when they next sign in. You have **5 attempts** to enter the 6-digit code. After 5 wrong codes the account is locked for 24 hours, or until an Admin resets the 2FA. There is no enforcement deadline. Your Admin decides when 2FA is turned on for each role and user. ### What you need * A smartphone with **Google Authenticator** or **Microsoft Authenticator** (free in the App Store and Google Play). * A **working email address** on your Dropboy profile. The setup email is sent there. * Your phone's **date and time set to automatic**, so codes stay valid. ### Get the authenticator app | App | iPhone | Android | Computer / web | | ---- | ---- | ---- | ---- | | **Google Authenticator** | [App Store](https://apps.apple.com/app/id388497605) | [Google Play](https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2) | [Website](https://support.google.com/accounts/answer/1066447) | | **Microsoft Authenticator** | [App Store](https://apps.apple.com/app/id983156458) | [Google Play](https://play.google.com/store/apps/details?id=com.azure.authenticator) | [Website](https://aka.ms/authapp) | --- ## For Administrators *Transport Buyer and Hauler accounts* ### Turn on 2FA for your roles #### Step 1. Open Role Management Log in to the Dropboy console and select the highlighted icon in the left-hand menu to open **Role Management**. ![Select the highlighted icon in the left-hand menu to open Role Management](https://storage.crisp.chat/users/helpdesk/website/-/f/1/0/3/f1031fad712a6800/image_fz9k3.png) #### Step 2. Check the starting point By default no role is selected. The screen says that two-factor authentication is off for your company. ![Role Management with no roles selected](https://storage.crisp.chat/users/helpdesk/website/-/f/1/0/3/f1031fad712a6800/image_13vnajz.png) #### Step 3. Turn on 2FA and save Toggle on **2FA Enabled** next to each role that should use 2FA, then click **SAVE**. The **Admin** role is switched on automatically, because Admins always need 2FA when any role is selected. ![Role Management with 2FA Enabled toggled on for roles](https://storage.crisp.chat/users/helpdesk/website/-/f/1/0/3/f1031fad712a6800/image_1mko2ms.png) || **Good to know:** Turning on a role does not send any email. Each user gets the setup email when they next sign in and press **SEND EMAIL**. The setup email goes to the address on each user's profile. Make sure every user in an enabled role has a working email address. Drivers often use shared or generic addresses, so check these before you turn on the Driver role. To stop requiring 2FA for a role, toggle it off the same way and click **SAVE**. #### Step 4. Turn 2FA on or off for a user Navigate to the user listing and select the user. If the Admin has turned on 2FA for the role, all users associated with that role will have 2FA enabled, and you can see it here. To turn off 2FA for a particular user, select the **Two factor authentication is enabled** toggle. ![User profile showing the Two factor authentication is enabled toggle](https://storage.crisp.chat/users/helpdesk/website/-/f/1/0/3/f1031fad712a6800/image_vami2x.png) ### Reset a user's 2FA Use this when a user has lost their phone, changed device or can no longer get codes from their authenticator app, or when a user is locked out after entering the wrong code 5 times. #### Step 1. Open the user's profile and find Security Open the user from the **Users** list. Under **Security**, click **RESET TWO-FACTOR AUTHENTICATION**. The note below the button explains when to use it: when the user has lost the phone with the authenticator app. ![Security section with the Reset two-factor authentication button](https://storage.crisp.chat/users/helpdesk/website/-/f/1/0/3/f1031fad712a6800/image_nolw7a.png) #### Step 2. Confirm the reset Dropboy asks you to confirm. The user is signed out everywhere and has to set up 2FA again at the next sign in. Click **Reset**. ![Reset two-factor authentication confirmation dialog](https://storage.crisp.chat/users/helpdesk/website/-/f/1/0/3/f1031fad712a6800/image_18o4xsb.png) *Check that the user's email address is correct before you reset. The new setup email is sent there.* ||| **Locked accounts:** A user who enters the wrong 6-digit code 5 times is locked for 24 hours. Resetting their 2FA unlocks the account sooner. If your company has only one Admin and that Admin enters the wrong code 5 times, nobody else can reset their 2FA. Contact support at [support@dropboy.com](mailto:support@dropboy.com) to have it reset. --- ## Need help? Contact us at [support@dropboy.com](mailto:support@dropboy.com) or visit [www.dropboy.com](https://www.dropboy.com).