Use TimescaleSecurity

Multi-factor user authentication

You can use two-factor authentication to log in to your Timescale account. Two-factor authentication, also known as two-step verification or 2FA, enables secure logins that require an authentication code in addition to your user password. The code is provided by an authenticator app on your mobile device. There are multiple authenticator apps available.

Timescale Console 2FA

This page describes how to configure two-factor authentication with Google Authenticator.

Prerequisites

Before you begin, make sure you have:

Configure two-factor authentication with Google Authenticator

Take the following steps to configure two-factor authentication:

  1. Log in to Timescale Console.
  2. Click the User name icon in the bottom left of Timescale Console and select Account.
  3. In Account, click Add two-factor authentication.
  4. On your mobile device, open Google Authenticator, tap +, and select Scan a QR code.
  5. Scan the QR code provided by Timescale Console in Connect to an authenticator app and click Next.
  6. In Timescale Console, enter the verification code provided by Google Authenticator, and click Next.
  7. In Save your recovery codes, copy, download, or print the recovery codes. These are used to recover your account if you lose your device.
  8. Verify that you have saved your recovery codes, by clicking OK, I saved my recovery codes.
  9. If two-factor authentication is enabled correctly, an email notification is sent to you.
Info

If you lose access to the mobile device you use for multi-factor authentication, and you do not have access to your recovery codes, you cannot sign in to your Timescale account. To regain access to your account, contact support@timescale.com.

Regenerate recovery codes

If you do not have access to your authenticator app and need to log in to Timescale Console, you can use your recovery codes. Recovery codes are single-use. If you've used all 10 recovery codes, or lost access to them, you can generate another list. Generating a new list invalidates all previously generated codes.

  1. Log in to Timescale Console.
  2. Click the User name icon in the bottom left and select Account.
  3. In Account, navigate to Two-factor authentication.
  4. Click Regenerate recovery codes.
  5. In Two-factor authentication, enter the verification code from your authenticator app. Alternatively, if you do not have access to the authenticator app, click Use recovery code instead to enter a recovery code.
  6. Click Next.
  7. In Save your recovery codes, copy, download, or print the recovery codes. These are used to recover your account if you lose your device.
  8. Verify that you have saved your recovery codes, by clicking OK, I saved my recovery codes.

Remove two-factor authentication

If you need to enroll a new device for two-factor authentication, you can remove two-factor authentication from your account and then add it again with your new device.

  1. Log in to Timescale Console.
  2. Click the User name icon in the bottom left of Timescale Console and select Account.
  3. In Account, navigate to Two-factor authentication.
  4. Click Remove two-factor authentication.
  5. Enter the verification code from your authenticator app to confirm. Alternatively click Use recovery code instead to type the recovery code.
  6. Click Remove.

Keywords

mfaaccountsadmin

Found an issue on this page?Report an issue or Edit this page in GitHub.

PreviousSAML authenticationNextClient credentials

Related Content

SAML (Security Assertion Markup Language)
SAML is a standard for exchanging authentication and authorization data. Timescale Cloud offers SAML authentication as part of its security suite.
User management
Manage your projects in Timescale Console. Add and delete users, join and leave projects, transfer project ownership, and configure authentication
Security
A high level of security is a major requirement to any database. Learn how Timescale Cloud protects your services with MFA, SAML, SSL modes, read-only access, VPC peering, and IP allow lists
Virtual Private Cloud
Virtual Private Cloud peering ensures that your Timescale Cloud services are only accessible through your secured AWS infrastructure. Set up VPC peering in Timescale Console
Metrics and logging
Timescale Cloud enables you to monitor your services using the built-in metrics or by integrating third-party services. See the options available in Timescale Console
About security in Timescale Cloud
Learn how Timescale Cloud protects your data with secure development practices, as well as configurable features that restrict access to your services