Two Factor Authentication (2FA)

Two-Factor Authentication (2FA) adds an extra layer of security to your ResultsHQ account. You can use either an authenticator app (like Google Authenticator) or email authentication, depending on your user type.

THIS DOCUMENT COVERS 

• 👥 User Groups
  •  
    •  
      • Overview of user roles and access levels.
• 🔐 2FA Setup
  •  
    •  
      • How to enable Two-Factor Authentication for secure login.
• 👉 Choosing your 2FA Method
  •  
    •  
      • (Med & Low Risk Users) 
• 🔄 Resetting 2FA
  •  
    •  
      • How to help users regain access if they lose their authenticator app.

👥 User Group Categories & 2FA Requirements

We’ve grouped users into three risk categories to determine how 2FA is applied:

High Risk State & National SuperUsers and Registras

• 2FA will be “Mandatory” for these users  
• Authenticator app will be the only option 

Medium Risk Centre & Club Super Users and Registras

• 2FA will be “Mandatory” for these users  
• Users can choose between either the Authenticator app or Email authentication  

Low Risk Centre & Club Results Entry Users, Centre & Club Reporting Users and Families / Athletes 

• 2FA will be “Optional” for these users 
• Centres / Clubs can influence their users to set up 2FA if they choose
• Users can choose between either the Authenticator app or Email authentication

🔐 2FA Setup

ALL USERS

Here is a video to show you how to set up your Authy  or any authenticator app - https://authy.com/guides/twilio/  from Twilio as your 2FA app to provide you with the code to log in

LOW RISK USERS 

(Only applies to Low Risk Users who choose to set up 2FA)

Go into your ResultsHQ account profile page, at the bottom of the account settings, you will see something similar to the below: 

MED & LOW RISK USERS 

Choose your preferred authentication option which is either

1. Setup Two-Factor Authentication app or
2. Email authentication

👉 Step 2: Choose Your Authentication Method

Available to Medium and Low Risk users:

Option 1: Authenticator App (Recommended)

1. Download the Google Authenticator app from your device’s app store

2. In your ResultsHQ account, select Set up 2FA via app

3. Once you select in your account settings, a QR code will appear  - se your phone to scan the QR code (ensure the camera option on your phone has been enabled) 

(This step is required upon set up only) 

4. Enter the  number code shown in the app into ResultsHQ to pair your account

5. Going forward, open your app when logging in and enter the 6-digit code when prompted

Option 2: Email Authentication

1. Once you select  in your account settings, a 2FA pairing code will be sent to your email address. 

2. Put the number that appears in your email inbox into ResultsHQ  to pair your email.

3. Moving forward, simply log in to ResultsHQ. When prompted, an email with a 6 digit security code will be sent, and enter that 6 digit security code into ResultsHQ, then continue as usual.

Note: Email security codes are valid for 10 minutes from the time they are sent. This allows time for delivery delays on slower email servers.

Countdown Timer on the Email Code Screen

When you log in using email authentication, a countdown timer is displayed on the code entry screen showing how much time remains before your code expires.

• The timer counts down in real time (in MM:SS format) from the moment the email code is issued.
• When the timer reaches zero, the code expires and the entry form is removed.
• If your code expires before you receive or enter it, you'll be prompted to log in again to request a new one.

✅ You’re all set! 2FA is now enabled on your account.

🔄 Resetting Two-Factor Authentication (2FA)

If you’ve lost access to your authenticator app and can't log in, a Super User from your Centre (or the State) can help you reset your 2FA.

✅ What to Do:

1. Contact a Super User at your Centre.
   If they’re unavailable, a State Super User can assist by accessing your Centre’s settings.

2. The Super User can remove your existing 2FA setup by following these steps:

🛠 How Super Users Can Remove 2FA:

1. Go to the Setup tab

2. Click on Users

3. Find the specific user and click the Action button

4. Select "Remove 2FA"

5. You’ll be taken to the user's Manage 2FA page

6. Click Remove 2FA to confirm

🔁 After 2FA is Removed:

Once your 2FA is removed, simply log in again.
You’ll be prompted to set up 2FA from scratch, using either an authenticator app or email (depending on your user group).

If you have further questions, please contact us at support@timingsolutions.com.au