Skip to main content

Two-step authentication

For your information

Two-step authentication is not available for federated users.

With two-step authentication, you must enter both your password and a one-time verification code to log in to your account. Two-step authentication is enabled by default for all users after they register and complete their profile.

Disabling two-step authentication in the control panel and re-enabling it can only be done by the Account Owner. For users with other roles, two-step authentication is always enabled; the user can only choose how to receive the code.

You can obtain a one-time code by:

Additionally, you can create backup codes that can replace the confirmation code from an email or authenticator app if you lose access to your email or the device with the authenticator app. If you have lost your backup codes or used all of them, you can refresh them in the control panel.

If none of the methods for receiving a confirmation code are available to you, disable two-step authentication.

Enable login via authenticator application

You can use any authenticator application, such as Google Authenticator or Microsoft Authenticator.

  1. In the control panel, open the menu (account number) in the upper right corner and select Profile.
  2. Go to the Security and login section.
  3. In the Account login method block, in the Two-step authentication line, click Edit.
  4. Turn on the Code generation app toggle switch.
  5. Enter your user account password. If you enter the password incorrectly three times, the session will be terminated and two-step authentication setup will be locked for 24 hours.
  6. Click Confirm.
  7. Scan the QR code in any authenticator application. If you cannot scan the code, enter the secret key in the application.
  8. Enter the six-digit code generated in the application.
  9. Click Enable.

Enable login via email

The confirmation code is sent to the email address you specified in your profile.

You can change the email address for two-step authentication.

  1. In the control panel, open the menu (account number) in the upper right corner and select Profile.
  2. Go to the Security and login section.
  3. In the Account login method block, in the Two-step authentication line, click Edit.
  4. Turn on the Email toggle switch.
  5. Enter your user account password. If you enter the password incorrectly three times, the session will be terminated and two-step authentication setup will be locked for 24 hours.
  6. Click Confirm.
  7. Enter the four-digit confirmation code you received in the email. The code is valid for five minutes. If you do not have time to enter the code, request it again.
  8. Click Enable.

Create backup codes

We recommend creating backup codes the first time you log in to your account. Each code can only be used once. You can view the number of unused backup codes in the control panel in the Two-step authentication section → Backup codes block.

  1. In the control panel, open the menu (account number) in the upper right corner and select Profile.
  2. Go to the Security and login section.
  3. In the Account login method block, in the Two-step authentication line, click Edit.
  4. In the Backup codes block, click Create.
  5. To confirm the creation of backup codes, enter the user password. If you enter the password incorrectly three times, the session will be terminated and backup code creation will be locked for 24 hours.
  6. Click Confirm.
  7. Write down or print the codes — they will be hidden after the page refreshes. Store your backup codes in a safe place.

Update backup codes

If you have lost your backup codes or have used all of them, you can update them. Once updated, any previously created backup codes will no longer work.

  1. In the control panel, open the menu (account number) in the upper right corner and select Profile.
  2. Go to the Security and login section.
  3. In the Account login method block, in the Two-step authentication line, click Edit.
  4. In the Backup codes block, click Refresh.

Change email for two-step authentication

  1. Change the email address.
  2. Disable two-step authentication.
  3. Again, enable two-step authentication via email.

Disable two-step authentication if you have access to the control panel

For your information

If you have access to the control panel, two-step authentication can only be disabled by the Account owner.

  1. In the control panel, in the upper-right corner, open the menu (account number) and select Profile.
  2. Go to the Security and login section.
  3. In the Account login method section, in the Two-step authentication row, click Change.
  4. Turn off the toggle switch for Code generator app or Email.
  5. To confirm that you want to disable two-step authentication, enter the user password. If you enter the password incorrectly three times, the session will be terminated and disabling two-step authentication will be locked for 24 hours.
  6. Click Disable.

Disable two-step authentication if you do not have access to the control panel

For your information

If you do not have access to the control panel, a request to disable two-step authentication can only be sent by the Account owner.

If you are not the Account Owner, contact the Account Owner — they need to delete you from the user list and add a new user with the correct details.

  1. Prepare the following documents:

    • TIN/VAT of the organization;
    • a document confirming the authority of the person who signed the access recovery application (for a CEO — a copy of the appointment order or resolution; for other persons — a power of attorney) ;
    • an application using the template;

  2. Send the documents to payment@selectel.ru.

  3. If any questions arise, we will request additional documents.