How to Use Two-Factor Authentication

Two-factor authentication provides another layer of security in addition to the password that you normally use to log in to the OVHcloud Manager. The password is static and is known as the "first factor" for authentication purposes.

OVHcloud offers two forms of authentication for the "second factor." First, you can pair any authentication app (i.e. Authy, Google Authenticator, LastPass, etc...) on a mobile device to your OVH US account. Second, you can pair a U2F (Universal 2nd Factor) key with your account and use it as your second form of authentication.

Additionally, OVHcloud allows you to restrict access to the OVHcloud Manager by IP address.

Note: There are some known issues with using a U2F key in the OVHcloud Manager with Mozilla Firefox, so we recommend that users wishing to pursue this option use a different browser.

Prerequisites

• An authentication app or a U2F key

Topics

• Enabling and Using Two-Factor Authentication
• Disabling Two-Factor Authentication
• Restricting Access By IP Address

Enabling and Using Two-Factor Authentication

In this section, you will set up your account to use two-factor authentication and test it to make sure it works for you. First, log in to the OVHcloud Manager and click your name on the right-hand side of the page.

Navigate to the Security tab. Depending on whether you want to use a mobile app or a key, select Add an application or Add a key. Proceed through the menu that follows for each option.

Regardless of which method you choose, you will be taken to a screen which will give you ten emergency codes. Make sure to save these codes in a secure location as they will be the only way to access the OVHcloud Manager should you lose access to the mobile authentication app or U2F key you have paired with the OVHcloud Manager. After you have saved the emergency codes, click the Confirm button to complete the process.

To test if two-factor authentication has been set up correctly, log out of the OVHcloud Manager completely and attempt to log back in. If, after entering your password, you are taken to a screen like the one below, you have successfully set up two-factor authentication.

Enter the code from your authenticator application or insert your key to complete your login.

Disabling Two-Factor Authentication

If you need to disable two-factor authentication on your account for any reason, you will need to contact OVHcloud Support via chat.

Restricting Access by IP Address

To restrict access to the OVHcloud Manager by IP address, navigate to the Security tab in your user profile as detailed above. Click Enable next to access restricted by IP. You can choose to either authorize access by IP or deny access by IP.

Warning: If you enable "Access restricted by IP" and then do not designate IPs to be allowed or disallowed, you will be locked out of the OVHcloud Manager as soon as you navigate away from this page.

Click Add a restriction to add an IP to authorize or restrict.

Note: If you don't know your IP address, you can type "What is my IP?" into a Google search and Google will tell you the IP address of the device you are currently using.

Conclusion

Two-factor authentication provides our customers with an extra layer of security on their accounts. Now that you know how to use it, we highly recommend you take advantage of this feature to protect all of your OVHcloud accounts.