...
Two-factor authentication (2FA) increases the security of our CMS by asking you for a code in addition to your password.
Setting up 2FA
Navigate to your CMS login screen (e.g. content.vic.gov.au)
Enter your username and password and click ‘Log in’.
You’ll see a warning message ‘You need to enable Two Factor Authentication’.
Click on the ‘Enable Email OTP’ link. You’ll be asked to enter your password again.
Tick the checkbox and click ‘Save’.
The screen will change to show ‘TFA enabled’. You can then start working in the CMS.
The next time you log in, you’ll see the following screen. You’ll see that the Verify button is greyed out. Click the Send button. (The screen will refresh and the Verify button will now be blue and available.)
Go to your mail app/site and find the email with the code. Copy the code into the field and click on Verify.
If you didn’t enter the code from your email before it expired, you can click the Resend button.
...
To check if your 2FA is set up correctly, go to the 2FA tab on your profile page. It should say ‘Status: 2FA enabled’.
...
Recovery codes
As part of the 2FA set-up, you can generate one-time use recovery codes, which can be used in case you lose access to your 2FA application.
...
Just select ‘show codes’ and enter your password when prompted.
...
Using your recovery codes
If you lose access to your 2FA application, you’ll need to use one of your recovery codes.
...
Then enter one of your recovery codes when prompted and select verify.
...
Resetting your 2FA application
You can reset your 2FA application if you're switching to another 2FA service.
...
If you press ‘Cancel’, you'll return to the 2FA tab. Your previous 2FA method will remain enabled.
Troubleshooting and getting help
Failed validation limit reached
You get 6 attempts within a 5-minute period to get your 6-digit 2FA verification code correctly.
...
If you are still receiving the ‘failed validation limit reached’ message after waiting 5 minutes, fill out an SDP support request. Be descriptive in your request so we can assist you as quickly as possible.
Losing or getting a new mobile device
If you lose your mobile device or get a new one, you won’t have access to your 2FA application.
...
If you lost your recovery codes or never received any, fill out an SDP support request.
No mobile device
If you do not have a mobile device, download ‘Protecc’ from the Windows store if you’re using a Windows computer, or ‘Authenticator 2FA | Sentinel' from the app store if you’re using a Mac.
2FA application already in use for another service
If you already use one of the 2FA applications for another account, you can still use the same app.
...