Activating Two-Factor Authentication
Start your journey to the next level of network computing
NoMachine two-factor authentication is an additional security layer against unauthorized access. It can be enabled to protect your NoMachine account and also safeguard against remote connections to your NoMachine-enabled computer. Two-factor (2FA) can be activated when you create a NoMachine account and download the NoMachine app to your chosen devices. Push notifications are sent to all of the approval devices for you to approve or deny requests for access. It’s simple to set-up. Just follow the steps below.
- Create a NoMachine account from any computer where you have installed NoMachine (version 9 or later) or create it via the NoMachine website if you prefer. The email you use to create your account represents your User Id to access a number of services, including NoMachine Network, and you will need it for the next stage.
- Download the NoMachine App to any of your iOS or Android devices.
Add your device
- Open the app on your device and log in to the NoMachine Network service using your NoMachine account.
- Click 'Yes' to add your device.
- You can now close the NoMachine app.
Fig. 1 - Login to the NoMachine Network service on the device you want to add
Fig. 2 - Click 'Yes' to add your device to those enabled to receive 2FA notifications
Activate 2FA for connections to your computer
- Now move to the computer that you want to protect with 2FA. If you have not already done so, install one of the NoMachine server products, e.g., Free Edition or Enterprise Desktop.
- Open NoMachine, proceed to Settings, select Network, select Machine. There is no need to login with your NoMachine account.
- In 'Two-factor authentication' click 'Change'.
- Tick the box 'Require 2FA to connect to this machine' (Fig. 4).
Fig. 3 - Click 'Change' to enter the 2FA configuration panel
Fig. 4 - Tick the box 'Require 2FA for this machine'
- Here, it's possible to configure NoMachine to send confirmation requests to a specific User Id when a remote user tries to connect to that computer. That User Id must have at least one device enabled.
- Insert the User Id which is going to receive push notifications. This can be your NoMachine account or someone else's.
- Click Apply and provide the password for that User Id.
- That’s it. The next time a user connects to a computer protected by 2FA, a push notification will be sent to all of the approval devices.
Fig. 5 - A confirmation message will appear. Click OK
- With 2FA for login, you can protect your NoMachine account and thus your contacts and machines lists from unauthorized access.
- To receive a confirmation request when someone attempts to login using your NoMachine account, open the NoMachine player on your computer.
- Proceed to Settings, select Network, select Login and login with your User Id.
- In 'Two-factor authentication' click 'Change' (Fig. 6).
- Tick the box 'Require 2FA for the Network login' (Fig. 7).
Fig. 6 - Login with the User Id and click 'Change'
Fig. 7 - Tick the box 'Require 2FA for the Network login'
- Click Apply.
- Provide the password for that User Id.
- A recovery code will be shown. If you misplace your device, the recovery code will allow you to gain access to your account. See the next section to learn more about the recovery code.
- You can go back to the main panel, you’re done.
Fig. 8 - Successful activation shows a recovery code
- During the activation procedure of two-factor authentication for login to your NoMachine account, a recovery code is printed which you should note down.
- This is required if the specific User Id loses the paired device or cannot receive 2FA notifications for whatever reason.
- If that happens, go to the Login panel. Click on 'Problems with logging in?' and follow the steps.
Fig. 9 - Login panel after a failed login attempt. Click on 'Problems with logging in?' and follow the instructions
- The recovery code can be reset at any time from the 2FA panel. To do this, go back to Network settings, under Two-factor authentication click on 'Change', and in the successive panel click on 'Generate a new recovery code', then follow the instructions, filling in your User Id and password.
- Make sure you write the new recovery code down.
Fig. 10 - Click on 'Generate a new recovery code' in the 2FA panel to set a new recovery code
