Administration – Customer Account Security

In this article you will learn:

• How to secure login to your customer account:
  • Using a notification email
  • Using an authenticator with a one-time password (OTP)
• How to log out active users of the Customer Administration
• How to check the login history
• Common problems
• Frequently Asked Questions

---

Confirmation via a link in the email

If email notifications about logins to the Customer Administration are enabled, you can make a successful login conditional on clicking a link in that email.

To set up security with this confirmation, follow these steps:

1. Log in to the Customer Administration ⧉.
2. In the top menu, select My account Customer.
3. In the left menu, click Account security.
4. In the box Account settings set how often emails with login information are sent and whether confirmation via a link is required.
5. Confirm the changes with the button Save Changes.

You can have the email with the login notice, and optionally a link, sent:

• Always (on)
  • On every login
  • The first time within an open browser
• When logging in from an unknown location (important only)
  • If the browser or IP address has changed since the last login
  • If the browser or IP address has changed compared to the entire login history
• Never (off)

If you turn off login notification emails, you cannot enable sending the confirmation link either.

Confirmation with a one-time password (OTP)

OTP is an abbreviation for OnoTimePassword. It is a six-digit one-time password that is valid for 30 seconds. After this time, a new password is generated based on a so-called shared key. You create this key when you activate OTP authentication, and it is stored both on our server and on the device you use as your authenticator. If the authenticator and the server are synchronized, the passwords based on the key match, and you can log in with them.

Given the length of the password and the limited time it exists, it is very unlikely that an attacker could guess it. Combined with the regular password for your customer account, this is a fairly effective protection.

Requirements for OTP authentication

First, make sure your customer account has the following set: a current mobile phone number and an email address. If you lose your authenticator, we will use this information to verify your identity and restore access.

To generate the one-time password, you use a so-called authenticator – a device on which you read the current one-time code at the given moment. Most commonly you will use a mobile phone, for example with these apps:

• Google Authenticator for Android
• Google Authenticator for iOS
• Microsoft Authenticator for Windows Phone
• Authenticator for Firefox OS

If your phone does not support mobile apps, you can use a browser extension:

• Authenticator for Firefox
• Authenticator for Chrome

Activating OTP in the administration

If you have:

• a current mobile phone number and email address set in the Customer Administration,
• an authenticator ready in your mobile phone or browser,

you can proceed to activate OTP. Follow these steps:

1. Log in to the Customer Administration ⧉.
2. In the top menu, select My account Customer.
3. In the left menu, select Account security.
4. In the box Two-factor authentication (OTP) click the button Set Up OTP.
5. Enter the code of the shared keyinto your chosen authenticator, or scan the QR code.
6. In the fields, enter the password for your customer account and a valid OTP password (6-digit number) from the authenticator.
7. Click the button Activate.

The next time you log in, the system will ask you to enter the OTP password.

Deactivating OTP

If you have access to the Customer Administration, proceed the same way as when activating, but in Account security, in the box Two-factor authentication (OTP) click the button Deactivate.

Losing the OTP authenticator

If you cannot access the Customer Administration because you lost your OTP authenticator, follow these steps:

1. Enter your login name and password in the Customer Administration ⧉.
2. In the next step, click the link I lost my OTP authenticator.
3. Check your mailbox. Within 5 minutes of sending, click the link to cancel the OTP authenticator in the email WEDOS Internet – OTP authenticator deactivation from the address wedos@wedos.com.
4. On the page opened from the email link, click the button Send SMS.
5. In the field, enter the SMS verification code.
6. Check I’m not a robot and click the button Submit.

OTP is now deactivated.

---

Logging out active users

If you suspect that someone has logged in to your Customer Administration without authorization, you can log out the active users of the Customer Administration:

• Using the link in the email with information about the login to your customer account (more about setting it up in the chapter Confirming login via a link in the notification email). The email comes from the address no-reply@wedos.com and the link has the form https://login.wedos.com/logout-all/(specifický_kód_příkazu).
• Using the button in the Customer Administration.

To access the button for logging out all active users of the Customer Administration, follow these steps:

1. Log in to the Customer Administration ⧉.
2. In the top menu, select My account Customer.
3. In the left menu, click Account security.
4. In the box Log out from all sessions click the button Log Out All.

---

Checking the login history

If you want to check who logged in to your customer account, and when and from where, follow these steps:

1. Log in to the Customer Administration ⧉.
2. In the top menu, select My account Customer.
3. In the left menu, click Login history.

The table gives you a quick overview of the status and origin of logins to the Customer Administration. For more details, click the magnifying glass icon on the left side of the row.

---

Common problems

Common account security problems include:

• Email confirmation cannot be required
• OTP activation failure
• Email or phone unavailable when deactivating OTP

---

Frequently Asked Questions

Was this article helpful?

Your feedback helps us improve our articles.

YesNo

Would you like to tell us something about this article? (optional)

Your message goes to the documentation team, who do not reply to it. If you need help, contact us using the contact form. Do not include passwords or personal data.

Leave this field empty