Two factor authentication (2FA) helps tax practitioners who want to reduce the risk of their account being maliciously compromised. When enabled, 2FA provides a second layer of security to make it more difficult for unauthorized users to gain access to the account. Canopy offers support for two-factor email authentication.

When 2FA is enabled, Canopy will email a verification link to authenticate your account upon login. You will only be allowed to access your Canopy account once you have clicked on the verification link sent to your email.

For your convenience, you will have the option to remember a device for 30 days when your login is authenticated. You will not need to authenticate each time you log in unless you try to access Canopy from a new or different device within the 30 day window.

Enabling Two Factor Authentication

1. To enable 2FA, navigate to your Profile settings in Canopy.

2. Click the Two Factor Authentication checkbox.

3. Click Save Changes.

• You will see a notification when you have successfully enabled 2FA.
• After enabling 2FA, Canopy will send you a verification email upon your next login.
  • Click the link in your email to navigate directly to Canopy.
  • To remember your device for 30 days, check the box on the fly-in window.

Disabling Two Factor Authentication

You can switch two factor authentication (2FA) off by navigating to your profile settings. To get started, click on your profile.

1. Click Settings on the pop-out menu.

2. Click the Two Factor Authentication checkbox.

3. Click Save Changes.

• Once 2FA is turned off, you will not be prompted to authenticate your identity when you log in.

Require 2FA for Team Members

Admin users can require that 2FA be set up for all team members. When required, team members will be unable to disable 2FA on their accounts until an administrator changes 2FA back to Optional. To get started, navigate to Canopy's Settings as an Admin.

Roles/permissions:

• Roles: Admin
• Permissions: Company Info

1. Click on Team Members & Teams in the left-side navigation column.

2. Click on the 2FA column header.

3. Select either Require all Team Members or Optional.