<h1>What Is 2FA</h1><p>Two-Factor Authentication (also referred to as MFA) requires users to verify their identity using <strong>two independent factors</strong>:</p><ol class="steps-list"><li><p>Something the user knows (email + password)</p></li><li><p>Something the user has (a time-based one-time password)</p></li></ol><p>Wunder Mobility uses <strong>TOTP (Time-based One-Time Password)</strong> authentication, generated by common authenticator apps such as Google Authenticator or Authy.</p><hr><h1>How 2FA Works</h1><p>When 2FA is enabled for a tenant:</p><ol class="steps-list"><li><p>A user logs in with their credentials.</p></li><li><p>The system prompts the user to set up 2FA (if not already configured).</p></li><li><p>The user scans a QR code with an authenticator app.</p></li><li><p>The app generates a time-based one-time password (OTP).</p></li><li><p>The user enters the OTP to complete login.</p></li><li><p>Backup recovery codes are generated for emergency access.</p></li></ol><p>Once configured, the OTP is required on every login.</p><hr><h1>Current Availability</h1><h3>Dashboard (Backoffice)</h3><ul class="accent-bullets"><li><p>✅ Fully supported</p></li><li><p>2FA can be enabled at tenant level</p></li><li><p>Users are forced to configure 2FA on next login</p></li><li><p>Uses TOTP-based authentication</p></li></ul><h3>End-User Mobile App</h3><ul class="accent-bullets"><li><p>❌ Not recommended</p></li><li><p>Not recommended for production use</p></li></ul><h3>Service App</h3><ul class="accent-bullets"><li><p>❌ Not recommended</p></li><li><p>MFA can block field staff access</p></li></ul><hr><h1>When 2FA Is Recommended</h1><p>2FA is <strong>strongly recommended</strong> in the following scenarios:</p><ul class="accent-bullets"><li><p>Administrative dashboard access</p></li><li><p>Multi-user backoffice environments</p></li><li><p>Enterprise or corporate operators</p></li><li><p>High-risk or high-value fleets</p></li><li><p>Compliance-driven environments</p></li><li><p>Fraud prevention initiatives</p></li></ul><p>It is especially important for:</p><ul class="accent-bullets"><li><p>Admin accounts</p></li><li><p>Customer support roles</p></li><li><p>Finance and billing users</p></li><li><p>Users with wide operational permissions</p></li></ul><hr><h1>When 2FA Is Not Recommended</h1><p>2FA should be used with caution or avoided in these cases:</p><ul class="accent-bullets"><li><p>End-user consumer apps</p></li><li><p>Service apps used by field staff</p></li><li><p>Scenarios where account recovery must be self-service</p></li></ul><hr><h2>Configuration and Enablement</h2><p>2FA is <strong>not self-service configurable</strong>.</p><p>To enable 2FA:</p><ul class="accent-bullets"><li><p>Contact <strong>Wunder Mobility Customer Success</strong></p></li><li><p>All backoffice users will be prompted to set it up</p></li></ul><hr><h1>Recovery and Reset Process</h1><p>Currently:</p><ul class="accent-bullets"><li><p>Users cannot reset their own 2FA tokens</p></li><li><p>Admins cannot reset 2FA via the dashboard</p></li></ul><p>If a user loses access:</p><ul class="accent-bullets"><li><p>Customer Success needs to be contacted</p></li></ul><p>Recovery codes should be stored securely by users.</p><hr><h1>Known Limitations</h1><ul class="accent-bullets"><li><p>No self-service reset for 2FA</p></li><li><p>No backoffice visibility of 2FA status</p></li><li><p>Limited support in mobile and service apps</p></li></ul><hr><h1>Best Practices</h1><ul class="accent-bullets"><li><p>Always enable 2FA for admin users</p></li><li><p>Communicate rollout clearly to internal teams</p></li><li><p>Document recovery procedures internally</p></li><li><p>Avoid enabling 2FA shortly before go-live</p></li></ul><hr><h1>Security Considerations</h1><p>2FA significantly improves security but introduces operational overhead.</p><p>Operators should:</p><ul class="accent-bullets"><li><p>Balance security vs operational usability</p></li><li><p>Ensure backup access is documented</p></li><li><p>Avoid locking out critical staff</p></li><li><p>Coordinate rollout with Customer Success</p></li></ul><hr><h1>Support</h1><p>For enabling, resetting, or troubleshooting 2FA: </p><ul class="accent-bullets"><li><p>Contact <strong>Wunder Mobility Customer Success</strong></p></li></ul><p></p>

Security

Two-Factor Authentication (2FA) adds an additional security layer to user accounts by requiring a second verification factor during login. 

Two-Factor Authentication (2FA)

Platform overview

Getting Started

Locations and branches

Damages and Task management

Service App (Beta)

Optimizing Vehicle On-Field Maintenance Flows

Card Management (RFID)

Fleet & Operations

Managing On-Demand Rentals

Radar

On-Demand vs. Pre-Booking

Additions and Insurance

Subscriptions & Multi-Benefit Packages

Pricing, Memberships & Promotions

Login Options & Sign up Fee for End Users

User Management & Profiles

Roles and Permissions 

Business accounts and corporate billing

Users & Accounts

Payment Gateways and Methods

Invoicing

Invoice PDF Structure & Customization

Revenue Protection and Payment Assurance

Payments & Invoicing

Mobile App Translation Keys: Sign Up, Rental & Booking

App Configuration & Customization

MaaS API

FreeNow Integration Overview

Credit Rating (CRIF)

Veriff Driving License Verification

Onfido Identity & Driver's License Verification

Braze Messaging integration 

AppsFlyer Integration

Zendesk Chat

Integrations & APIs

INVERS IoT Integration

Vehicle & IoT Support

Introducing Wunder Analytics (Beta)

Issues Analytics (Beta)

Data Insights

Choosing the Right Sign-In Method in Wunder  (Email OTP vs Phone Login vs Password)