Note: This feature is currently in beta. The core functionality works as described and we are still polishing details. Small changes to wording, screens, or behaviour may still occur.
How two-factor authentication via the Candis App works
Two-factor authentication, or 2FA, adds a second factor to your login with email address and password. With our recommended method, Candis sends a push notification to the Candis App on your smartphone.
As soon as you use the Candis App and log in there once, Candis automatically activates push notification approval as your second factor. You do not need to change any additional settings in Candis.
Note: Two-factor authentication via the Candis App protects your web login in Candis. You confirm the login in your browser through the Candis App.
Requirements
To confirm your web login with a push notification, the following requirements must be met:
You have installed the Candis App on your smartphone.
You use at least version 2.1 of the Candis App.
You have logged in to the Candis App once with your email address and password.
You have access to your smartphone when you log in to Candis in your browser.
You have enabled push notifications for the Candis App in your smartphone settings.
Tip: Check the app version on your smartphone and update the Candis App in the App Store or Google Play Store if you use a version older than 2.1.
Tip: Enable push notifications for the Candis App on your smartphone. This ensures that login approval requests reach you reliably and immediately on your lock screen or in your notification center.
Confirm your web login with the Candis App
Open Candis in your browser and log in with your email address and password.
Candis shows the message Waiting for your approval.
Open the push notification on your smartphone.
The Candis App opens the screen Confirm login attempt.
Check the details of the login attempt. The Candis App shows the account name, the device, and the browser, for example Chrome on Mac OS X.
Tap Confirm if the details match your current web login.
Candis completes the web login in your browser automatically.
Note: Tap Reject if you did not start the login attempt yourself. This prevents another person from logging in with your credentials. Change your password afterwards.
Use an alternative method when your smartphone is not available
If you do not have access to your smartphone or the Candis App, you can switch to an alternative authentication method.
Start the web login with your email address and password.
Select Or try another way on the login page.
Choose an alternative authentication method.
Request the code by SMS or email.
Enter the code on the login page to complete the web login.
Tip: Use this alternative only when you cannot access the Candis App. Push notification approval remains the recommended method.
Use the Candis App to show credit card details
When you have set up the Candis App and logged in there, Candis also uses the app to securely show credit card details.
When you want to show credit card details in the web application, Candis sends a request to the Candis App. You confirm the request in the app and then see the credit card details in your browser.
Note: You cannot currently use the Candis App to confirm credit card payments. Showing credit card details and confirming credit card payments are separate actions.
Examples
Confirm your web login during daily work
You open Candis in your browser, enter your email address and password, and receive a push notification on your smartphone. You check the device and browser in the Candis App and tap Confirm. Candis logs you in to the web application.
Reject a login attempt
You receive a push notification even though you are not trying to log in to Candis. You open the Candis App, check the login attempt, and tap Reject. You then change your password.
Show credit card details securely
You want to view credit card details in the web application. Candis sends a confirmation request to the Candis App. You confirm the request on your smartphone, and Candis shows the credit card details in your browser.
Note: You cannot currently use the Candis App to confirm credit card payments.