Administration - Customer Account Security

In this article you will read:

• How to secure your customer account login:
  • Using the notification email
  • Using a key fob with one-time password (OTP)
• How to log out active customer administration users
• How to check your login history
• Common problems
• Frequently Asked Questions

---

Confirmation by link in email

If you have activated email notifications for logging in to customer administration, you can condition the successful completion of the login by clicking on the link in this email.

Use the following steps to set the security settings for this confirmation:

1. Log in to the customer administration ⧉.
2. Select My Account Customer from the top menu.
3. On the left menu, click Account Security.
4. In the Account Settings box, set the frequency for sending emails with login information and requesting confirmation using the link.
5. Confirm the changes by clicking Save Changes.

You can send an e-mail with a message about logging into the customer administration and possibly with a link:

• Always (On)
  • Every time you log in
  • For the first time in an open browser
• When logging in from an unknown location (only important)
  • If your browser or IP address has changed since you last logged in
  • If the browser or IP address has changed compared to the entire login history
• Never(off)

If you disable the login message, you cannot activate the confirmation link.

One-time password confirmation (OTP)

OTP stands for One Time Password. It is a one-time password of six numbers that is valid for 30 seconds. After this time, a new password is generated based on the shared key. This key is created when you activate OTP authentication and is stored both on our server and on the device you use as a key fob. If the key fob and the server are synchronized, the passwords based on the keys match and you can log in with them.

Due to the length of the password and the limited time of its existence, it is very unlikely that a potential attacker would guess it. Combined with a regular customer account password, it is therefore quite effective protection.

OTP authentication needs

First, make sure your customer account is set up with a current mobile phone number and email address. If you lose your key fob, we will use this information to verify your identity and restore access.

To generate the one-time password itself, you use a key fob - a device on which you read the corresponding one-time code at a given time. Most commonly, you use a mobile phone, for example, through the following apps:

• Google Authenticator for Android
• Google Authenticator for iOS
• Microsoft Authenticator for Windows Phone
• Authenticator for Firefox OS

If your phone doesn't support mobile apps, you can use a browser extension:

• Authenticator for Firefox
• Authenticator for Chrome

Activating OTP in the administration

If you have:

• a current mobile phone number and email address set up in the customer administration,
• a key fob in your mobile phone or browser,

you can proceed to activate the OTP. Follow these steps:

1. Log in to the customer administration ⧉.
2. Select My Account Customer from the top menu.
3. Select Account Security from the left menu.
4. In the Two-Factor Authentication (OTP) box, click Set OTP.
5. Copy the code of the shared key into the selected keyring or scan the QR code.
6. Enter the password for the customer account and a valid OTP password (6-digit number) from the key fob.
7. Click Activate.

The next time you log in, the system will prompt you to enter your OTP password.

Deactivation of OTP

If you have access to Customer Administration, follow the same steps as for activation, but in Account Security, click the Deactivate button in the Two-Factor Authentication (OTP ) box.

Loss of OTP key fob

If you do not have access to customer administration due to the loss of your OTP key fob, follow these steps:

1. Enter your login and password in the customer administration &box;.
2. In the following step, click on the I lost my OTP key fob link.
3. Check your email inbox. Within 5 minutes of sending, click on the link to cancel the OTP key fob in the WEDOS Internet - Deactivate OTP key fob email from wedos@wedos.com.
4. Click the send SMS button on the link from the email.
5. Enter the SMS verification code in the field.
6. Click I'm not a robot and click the submit button.

OTP is now deactivated.

---

Logging out active users

If you suspect that someone has logged into your customer administration wrongly, you can log out active customer administration users:

• By following the link in the customer account login email (for more information on setting up your account, see Confirmation of login by link in notification email). The email will come from the address no-reply@wedos.com and the link is https://login.wedos.com/logout-all/(specifický_kód_příkazu).
• Button in the customer administration.

To access the button to log out all active users of the customer administration, follow these steps:

1. Log in to the customer administration ⧉.
2. Select My Account Customer from the top menu.
3. On the left menu, click Account Security.
4. In the Unsubscribe from all sessions box, click Unsubscribe all.

---

Check your login history

To check when and from where someone logged into your customer account, follow these steps:

1. Log in to the customer administration ⧉.
2. Select My Account Customer from the top menu.
3. Click on Login history in the left menu.

The table gives you a quick overview of the status and origin of logins to the customer administration. For more details, click on the magnifying glass icon on the left side of the row.

---

Common problems

Common account security issues include:

• OTP activation failure
• Unavailable email or phone when deactivating OTP

---

Frequently Asked Questions