2FA adds a second step to login: after your password, you enter a 6-digit code from an authenticator app on your phone. It protects your account even if your password is leaked.

When is it required? Some buyer organisations require 2FA for all their users, and some user roles require it. If yours does, you will see "2-factor authentication (2FA) is required; please configure your account security" after logging in and be taken to the setup page. Otherwise it is optional and you can switch it on at any time.

Bonus: accounts with 2FA enabled are exempt from the 90-day password expiry.


Before you start

Install an authenticator app on your phone. We recommend Google Authenticator (Android and iPhone). Microsoft Authenticator and similar apps also work.


Enable 2FA

  1. Log in, click the person icon at the top right, then My Account.

  2. Open the Security tab and click Activate 2FA.

  3. Enter your password and click Confirm.

  4. In your authenticator app, add an account by scanning the QR code shown. If you cannot scan, type the text code shown under the QR code into the app instead.

  5. The app now shows a 6-digit code that changes every 30 seconds. Enter the current code in Application verification code.

  6. Click Verify and save. The Security tab shows Status: 2FA enabledwith the date it was set.


Logging in with 2FA

After entering your password, open your authenticator app and type the current 6-digit code for TenderBoard. Codes expire every 30 seconds, so enter it promptly.


Disable 2FA

  1. Go to My Account, Security tab, and click Disable 2FA.

  2. Enter your password and click Disable.

  3. The message TFA has been disabled appears and the Security tab shows Status: 2FA disabled.

If your organisation requires 2FA you will be asked to set it up again at your next login.


Problems

  • "Invalid application code. Please try again." Codes are time-based: check that your phone's clock is set to automatic. Wait for the next code and try again.
  • "Invalid code, it was recently used for a login." Each code works once. Wait for the app to show the next code.
  • New phone or lost phone. The old app no longer works and you cannot log in. Email support@tenderboard.biz from your registered email address to recover your account. We will remove 2FA so you can log in and set it up again on the new phone.
  • No QR code shown. Try another browser or copy the text code into the app manually.