Skip to main content

Add Two-Factor Authentication (2FA) for External Document Access

Feature ideasSet up

Protect sensitive documents with an extra layer of security.

Before accessing a shared document, external users must verify their identity via a validation code sent to their phone.


(DE)
Zwei-Faktor-Authentifizierung (2FA) für externe Dokumentenzugriffe

Füge eine zusätzliche Sicherheitsebene hinzu.

Externe Nutzer müssen vor dem Zugriff auf sensible Dokumente einen Bestätigungscode per SMS eingeben.

2 comments

Log in to comment and vote

Comments2

  • Teal Lightbulb

    •

    Mar 27

    Actually, the current second step is not very safe: If the signing link is leaked, someone else may sign the document by simply using another mobile number he has a access to. Hence, the second authentication step is pretty much worthless, if the signing person can change the source for second authentication step on its own. The signature requesting person should be the person required to set the phone number as well. Alternatively, a second mail is send to the signing person to ensure, the link hasn’t been leaked (less safe than separate authentication source, but definitely more safe than the current SMS approach).

  • Teal Lightbulb

    •

    Mar 27

    In Germany, it’s not allowed to require employees to use their private equipment for authentication at work. Hence, there should be alternative solutions possible, e.g. SMS via TTS-Call, Second E-Mail with Code to the signing person, …