1. Introduction
This manual provides a practical guidance for setting up and using the Two Factor Authentication (2FA) method to login into the TrichoLAB web portal on www.lab.tricholab.com.
2. What is a 2FA
Two Factor Authentication also known as 2FA, is a security method in which a user needs to present two independent pieces of evidence to the authentication mechanism to gain access to the application or web side. To be granted with access, both pieces (factors) need to be successfully recognized as
a. something only the user knows and
b. something only the user has.
The most popular factors used in electronic authentication are password (factor a) and code generated on the user’s phone (factor b). To be able to use 2FA the user needs to use a third-party authenticator – a specialized application that is installed on the user’s phone and generates frequently changing code used in the authorization process.
3. Getting the authenticator
Authenticator is an application that generates authorization codes needed to get access to the protected application. The authenticator should be installed on the phone to which only the user has access (personal phone or company phone used exclusively by the user or group — receptionists, assistants, etc.). There are a number of third-party authenticators available for both Android and iOS (Apple) phones that may be downloaded from the Google Play Store or the Apple App Store. The most popular are: Authenticator by Google, Microsoft Authenticator, Twilio Authy, or 2FAS1.
We strongly recommend the use of Microsoft Authenticator. Before going to the next step of the procedure, you need to install one of these applications on the phone.
NOTE: If your phone is lost, contact TrichoLAB Support administrator immediately.
4. Enabling 2FA for the access to the TrichoLAB
For security reasons, the 2FA method is required for every user accessing the TrichoLAB web portal. If you are logging into the TrichoLAB web portal for the first time after the 2FA was introduced, you need to initialize your authenticator. After a user logins on the TrichoLAB web portal with the user name (email) and password, and after accessing
the website, instead of going directly to the TrichoLAB web portal, the authenticator initialization window will be presented:
Authenticator initialization window
The method of adding a new account differs from one authenticator to another. The examples below present the process with the Microsoft Authenticator. Please consult the manuals of your application to add an account.
How to Use Microsoft Authenticator with lab.tricholab.com
Step 1: Download and Install Microsoft Authenticator
If you haven't already, download and install the Microsoft Authenticator app on your mobile device. It’s available on both Google Play for Android and the App Store for iOS.
Step 2: Sign in to lab.tricholab.com
Open your browser and go to lab.tricholab.com.
Enter your login credentials (username and password) as required.
Step 3: Link Microsoft Authenticator to lab.tricholab.com
A QR code will be displayed on the screen.
Open the Microsoft Authenticator app on your phone.
Tap "QR code" icon to add an Account - right down corner
Scan the QR code displayed on the lab.tricholab.com website using your phone's camera
Choose Other Account (or Work/School Account, depending on the option provided).
Step 4: Complete the Setup
After scanning the QR code, the app will link your account.
You will now see a 6-digit verification code in the Microsoft Authenticator app for lab.tricholab.com
Step 5: Verify Your Account
Go back to the lab.tricholab.com website.
Enter the 6-digit code from the app into the field provided on the site.
Note: You can set the device's memorization for 30 days on a given browser by ticking the box. Then, for the next 30 days, you will not be asked for a code.
Step 6: Successful Authentication
After entering the correct code, your 2FA setup will be complete, and you'll be redirected to your account dashboard.
Step 7: Future Logins
Occasionally, when you log in to lab.tricholab.com, after entering your username and password, you may be asked to enter a code from the Microsoft Authenticator app.
Open the app, retrieve the current 6-digit code, and enter it on the site to log in.