We are aware that your projects may contain highly sensitive data, and we don’t want to leave anything to chance. That’s why Freelo supports two-factor authentication (2FA) for securely signing in to your account.
How to Set up Two-Factor Authentication
Go to Settings via your avatar in the top-right corner
Open the Security and Login and scroll down to Two-Factor Authentication (2FA). Click on Enable Two-Factor Authentication.
Enter your phone number and download the Google Authenticator app for iOS or Android. Then scan QR code displayed in Freelo.
After scanning, the app will generate a six-digit code that changes every thirty seconds for security reasons.
You will be asked to enter this code immediately after signing in to Freelo (after your email and password).
Use the two-factor authentication without the Google Authenticator app. After you sign in to Freelo click on Don't you know your code? and then Send SMS with code.
How to Disable Two-Factor Authentication
Only the captain or company captain can disable two-factor authentication.
If you changed your phone and used Google Authenticator, you usually don’t need to do anything. If cloud sync is enabled, your 2FA codes will transfer to your new device automatically. Other 2FA authenticators that support cloud synchronization work in a similar way.
If you still can’t log in to your account (e.g., you lost access to your 2FA codes), we recommend that the captain contact us at info@freelo.io.
Enforcing Two-Factor Authentication
As a captain, you can require users to enable two-factor authentication before they can access your projects. This feature is available only on the Business or Premium plan. Take a look at how to turn on a 2FA for projects.
Practical use cases
- Protecting sensitive projects – if you work with confidential client data or internal finances, 2FA ensures no one can access your account with a stolen password alone.
- Logging in from multiple devices – signing in from your computer, phone and tablet? Freelo notifies you about every login from a new browser or device.
- Lost or leaked password – even if your password ends up in the wrong hands, an attacker can't get in without the second factor.
- Enforcing 2FA for the whole team – as a captain, you can require 2FA before anyone accesses your projects, protecting the entire crew, not just your own account.
- Combined with a password manager – Google Authenticator together with a password manager (e.g. 1Password) makes logging in both fast and secure.