Secure Your Jobma Account with 2FA - Part 2 | Authenticator App Setup Guide

Here’s part 2 of securing your Jobma account with 2FA, using an authenticator app. By securing your account, you get an added layer of protection that’s fast, simple, and seamless. Whether you’re reviewing candidate applications, collaborating with your team, or managing interviews, your account and sensitive data stay safe and accessible only to you.

In this video, we provide a step-by-step guide to enable 2FA on Jobma using Google or Microsoft Authenticator:

1. Open Account Settings in your Jobma account
2. Select Two-Factor Authentication
3. Toggle on Authentication
4. Choose Authenticate and select Generate
5. Scan the QR code displayed with your authenticator app
6. Enter the code generated by the app and click Verify Authentication
7. Select Save Changes, and you’re all set!

Once enabled, every time you log in, you’ll enter a one-time code generated by your authenticator app. This ensures that even if someone has your password, they can’t access your account without your device, giving you peace of mind and keeping your hiring process smooth.

Why 2FA matters for recruiters:
✅ Protect sensitive candidate data and hiring records
✅ Prevent unauthorized access to your Jobma account
✅ Maintain a fast, efficient, and worry-free workflow
✅ Easily integrate security without disrupting daily tasks

Security and efficiency can go hand-in-hand. With Jobma, you can focus on what matters most - finding and evaluating top talent - while knowing your account is protected with industry-standard authentication practices.

لماذا من المهم نقل حسابات GOOGLE AUTHENTICATOR

كيفية نقل GOOGLE AUTHENTICATOR 2FA إلى هاتف جديد

ماذا لو فقدت هاتفي مع Google AUTHENTICATOR

كيفية تمكين Google Authenticator 2FA على أكثر من جهاز

أسئلة وأجوبة حول نقل Google Authenticator 2FA إلى هاتف جديد

احتفظ بخاصية 2FA ممكّنًا

Google Authenticator

Google Authenticator được hiểu như một phần mềm tạo mã xác minh để bảo mật tài khoản khi người chơi đăng nhập trực tiếp trên website.
Link: https://bho.network/vi/google-authenticator

كيفية تصدير حسابات 2FA من الهاتف القديم

كيفية استيراد حسابات 2FA إلى هاتف جديد

نصائح أمان 2FA إضافية

Google Authenticator app now lets you “Transfer Accounts”

Google Authenticator app has finally received an update for the first time in three years bumping the version from 5.0 to 5.10. The Android version of the app was last updated on August 22nd, 2017, while the iOS one was updated around a year ago to adjust it for iPhone X screens.

The update brings Material Design 2.0 that adjusts the layout of the app to take into account newer screens with…

View On WordPress

Google Authenticator app now lets you “Transfer Accounts”

Google Authenticator app has finally received an update for the first time in three years bumping the version from 5.0 to 5.10. The Android version of the app was last updated on August 22nd, 2017, while the iOS one was updated around a year ago to adjust it for iPhone X screens.

The update brings Material Design 2.0 that adjusts the layout of the app to take into account newer screens with…

View On WordPress

To know how to recover the Google Authenticator, kindly follow us on www.itbalm.com or call us at   +1 866-213-3111

https://www.cyclonis.com/how-to-backup-google-authenticator-from-android-phone-to-another/ How to Backup #GoogleAuthenticator from One #Android Phone to Another
https://t.co/PXL0S96gOQ https://t.co/TQ3jxXGYqF

First, you need to install the Google Authenticator app on your new smartphone. To do so you only have to go to the Google Play Store and download it from there as you would download any other app.

Afterward, you need to go to the Two-Step Authentication online page and press on the button that says "Move to a different phone". Since you’re using an android phone select Android from the list of options and press "Continue". You’ll see a barcode appear.

The next step is to launch the Google Authenticator app from your new phone and select the option labeled "Begin setup". Another window will appear. In this window, you must select the option that reads "Scan a barcode".
Note: You may be prompted to install a barcode scanner if you do not have one.

Once you have your barcode scanner installed you must scan the barcode shown on the Two-Factor Authentication page with the new phone.

The final step is to type the six-digit code displayed by the Google Authenticator app. Note: It may be automatically displayed or you may have to go back to the main window manually to view it. Enter the code into the window from the 2FA website, and press "Verify". (at Downtown Detroit)
https://www.instagram.com/p/B4tc_TBg13e/?igshid=ok6ow8grnmqn

Incredibly useful! the amount of times I’ve struggled to get into #PayPal because the #2FA SMS message doesn’t come through or I have no mobile signal - having the ability to use #GoogleAuthenticator / #Authy is AMAZING!!!

Install OpenVPN, Easy-RSA, and Google Authenticator

sudo apt-get update -yy && sudo apt-get install -yy openvpn easy-rsa libpam-google-authenticator

Digital Ocean has a pretty good how-to for setting up OpenVPN and Easy-RSA. This is what I used as a starting point for my own server. I won’t repeat their work here. 
 https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-ubuntu-16-04

Create file /etc/pam.d/openvpn and paste in the following:

account [success=2 new_authtok_reqd=done default=ignore]    pam_unix.so
account [success=1 new_authtok_reqd=done default=ignore]    pam_winbind.so
account requisite           pam_deny.so
account required            pam_permit.so
auth required pam_google_authenticator.so nullok

Edit /etc/openvpn/server.conf and append these lines to the bottom.

plugin /usr/lib/openvpn/openvpn-plugin-auth-pam.so openvpn
reneg-sec 0

I have expanded quite a bit on the make_config.sh script provided by Digital Ocean. You can get it at this Gist, along with the client configuration template used by the script.

https://gist.github.com/spiralsyzygy/a494631a4611e0d997d795185678541e

The script requires you have a configured MTA (Mail Transport Agent) 
(apt-get install mailutils)

Install it at /etc/openvpn/client-configs/

run it with the unix username as the first argument, and their email as the second, ie.  

./make_config.sh foo foo@example.com

The user will be emailed a URL to a QR code for linking Google Authenticator to their OpenVPN account, as well as the location where they can SCP a tarball of their openvpn client config and certs. 

Having users kick off the process by sending their ssh public key, and having them scp their openvpn config, provides a reasonably safe path for the key VPN key exchange. 

Google Authenticator

I ran into Google Authenticator today for the first time while working with Mailchimp for a client.

I really do not believe the best way to prove a user is legitimate is to be using an application which forces someone to download an app on their mobile phone and scan a page to get a password.

What if I didn’t have a mobile phone? What if I didn’t have room for another app? What if I simply do not wish to use Google apps on my phone?

Don’t get me wrong. Security is a must these days and I’m not against Google but this seems quite counter productive.

Thoughts?

Для повышения защищённости информации, которая хранится в различных сервисах, можно использовать не только сложные пароли, но и двухэтапную аутентификацию. Она значительно снижает риск взлома учётной записи. При активации двухэтапной аутентификации для входа в аккаунт пользователям понадобится не только постоянный пароль, но и специальный код подтверждения. У компании Google для этого есть отдельное приложение под названием Google Authenticator, которое на днях получило обновление.

В первую очередь новый Google Authenticator для Android изменился внешне. Разработчики обновили иконку приложения, а также внести некоторые изменения в интерфейс утилиты. Кроме этого, Google Authenticator теперь поддерживает устройства на Android Wear. Также разработчики устранили целый ряд небольших ошибок и недоработок и в тестовом режиме внедрили поддержку аппаратного токена NFC (протокол FIDO Universal 2nd Factor).

¿Qué pasaría si un día te robaran el acceso a tu blog o sitio web? 

Las malas noticias como el robo de contraseñas están a la orden del día. Por esto es importante que además de usar contraseñas seguras, actives en tu blog y sitio de WordPress la verificación de dos pasos.

¿Qué es la verificación de dos pasos?

Para entrar al administrador de tu sitio web, lo haces a través de un usuario y contraseña comúnmente. Pero, ¿qué pasa cuando alguien ajeno a nuestro sitio consigue la contraseña? 

La verificación de dos pasos sirve para tener mayor seguridad. Esta contiene dos datos importantes: algo que sabes: tu contraseña y algo que tienes en tu poder: un código que se envía a tu teléfono. 

Así, al acceder a tu sitio o blog, necesitas ambos datos. De nada sirve tener sólo la contraseña. Funciona de forma similiar a los servicios en línea que ofrecen los bancos (Token de seguridad)

A continuación te mostramos paso a paso cómo instalar la verificación de dos pasos en tu sitio web o blog de WordPress.

Este tutorial se divide en dos parte: 

1. Cómo instalar el plugin en WordPress y 

2. Cómo activar la verificación de dos pasos para tu usuario WordPress

Primera parte: Cómo instalar el plugin en WordPress

Sigue los siguientes pasos para instalar el plugin en WordPress:

1. Dentro del panel de administración, busca la opción “Plugins - Add New”

2. Elige “buscar plugin” y escribe “2-Step Verification”

3. Selecciona la primera opción, que fue creada por “As247” y dale clic en “Install Now”.

4. Una vez instalado, activa el plugin dando clic en “Activate Plugin”

Listo con esto ya está instalado el plugin, ahora veremos cómo configurar el usuario (esta acción se hace únicamente una vez)

Segunda parte: Cómo activar la verificación de dos pasos para tu usuario WordPress

Sigue los siguientes pasos:

1. Entra a tu cuenta en WordPress y coloca el cursor sobre tu nombre de usuario en la parte superior derecha y selecciona "2-step Verification”

2. Selecciona “Turn on 2-step verification…”

3. Selecciona el modelo de teléfono inteligente - smartphone - que usas, si lo prefieres puedes usar tu correo electrónico.

4.  Descarga la aplicación Google Authenticator en tu teléfono. Descárgala para Android - iOS. Una vez descargada; abre la la aplicación Google Authenticator y en el menú selecciona “ Set up account”.

5. Escanea el código que aparece en pantalla. En ese momento te dará un código que cambia cada 15 segundos; introduce el código que aparece en tu teléfono y da clic a “verify”.

¡Listo! haz configurado tu cuenta para contar la con la verificación de dos pasos (2 step verification).

De ahora en adelante cuando quieras entrar a tu WordPress después de escribir tu contraseña de costumbre te pedirá que insertes el código numérico que aparece en tu aplicación de celular o que te llegue por correo electrónico.

Nota: si no puedes escanear el código en el WordPress dale a la opción “Can´t scan the barcode” y te dará un clave que deberás inserta en la aplicación de tu teléfon inteligente - smartphone -

Nota 2: si seleccionas confiar en esta computadora el código te lo pedirá cada 30 días.

Ahora ya cuentas con la verificación de dos pasos, una forma de tener un blog y sitio web más seguro. 

@phirequiem