Multi-factor authentication: Key protection to tax professionals’ security arsenal now required

[Slippery Pencil]

5 hours ago, G2R said:

He did advise of a browser based authenticator if cell phone wasn't an option.  I tried it and it worked

How did you scan the qr code w/ the browser based authenticator?

[G2R]

14 hours ago, Slippery Pencil said:

How did you scan the qr code w/ the browser based authenticator?

There's a web address at the bottom of the QR code that you can copy and enter into the "secret code" section of the authenticator extension.  

 

1.

 

2.

 

3.

4.

[mcb39]

My Grandson, who works IT for a large Insurance Co; showed me his phone yesterday.  He has pages of authenticator codes. It's a good thing he is young.  I guess I should be able to handle two.  He said that his scenario is what is ahead for all of us.

[Margaret CPA in OH]

I already have 3 of these for my position as church treasurer and other relationships.  I was glad that one of them recognized the ATX QR code and allowed me to add it so I didn't have to get yet another one.  I am s bit terrified of losing this phone and am beginning to understand the need to have it on me or at hand all the time.  I hate it.  And I need an upgrade for security updates and am nervous about losing something important.

Sigh...Happy New Year!

[Lee B]

Yeah, I need my phone in order to log into my email and my accounting program.

What I worry about is dropping my phone

[Abby Normal]

Bitwarden has a browser extension for all of the main browsers. I haven't installed ATX yet so I haven't tried to make it work, but I'm hoping it does because Bitwarden also manages passwords and passkeys. I haven't done anything with passkeys but it looks like the way we are headed. Yay for no more passwords!

https://bitwarden.com/download/

[mcb39]

2 hours ago, Abby Normal said:

Bitwarden has a browser extension for all of the main browsers. I haven't installed ATX yet so I haven't tried to make it work, but I'm hoping it does because Bitwarden also manages passwords and passkeys. I haven't done anything with passkeys but it looks like the way we are headed. Yay for no more passwords!

https://bitwarden.com/download/

But, in order to get into most programs, you need the password first and then the authenticator second.

[Abby Normal]

3 hours ago, mcb39 said:

But, in order to get into most programs, you need the password first and then the authenticator second.

For now. Passkeys are supposed to eliminate all that.

[Lloyd Hudson]

I have multiple issues with 2fa for software. One has to have to multiple log-ins daily. I probably open ATX 10 or 15 times a day. ATXAuthenticator requires a phone. I think I will figure out passkeys because the password manager handles passkeys.

[mcb39]

I am not messing around anymore at this time. I did hear that they were trying to work out an easier solution.  At present, you have to log back in if the program is idle for 30 minutes.  Otherwise, once every twelve hours.

[Abby Normal]

A timely article on passkeys.

https://www.howtogeek.com/windows-to-replace-passwords-with-passkeys/

[joanmcq]

What about the older ATX programs on your computer?  Customer files?

[BrewOne]

Joan--mine are not requiring MFA.  I signed up for MFA when I downloaded 2022 and 2023 but it only required it once (and no authenticator) when I downloaded the software.

I don't know if that's a violation but I feel it should be up to ATX to fix it.

[Lee B]

5 hours ago, BrewOne said:

Joan--mine are not requiring MFA.  I signed up for MFA when I downloaded 2022 and 2023 but it only required it once (and no authenticator) when I downloaded the software.

I don't know if that's a violation but I feel it should be up to ATX to fix it.

Are you saying you can sign into ATX without an authenticator but with another kind of MFA

or are you able to sign into ATX without any kind of MFA?

[BrewOne]

On prior years, I can sign into ATX without any kind of MFA.

[joanmcq]

Does anyone have to provide MFA to sign into prior years ATX?  I don't think so.

I just got a new computer with Win 11.  Hopefully I can figure out the Win authenticator and use the built in antivirus.  Then hopefully I can download Medlin's AR program too.  It doesn't seem to recognize that I have an internet connection (!).

I am really over all these restrictions.  I want to quit.

[Margaret CPA in OH]

I have easily accessed prior  year programs.  I don't think the technology was programmed into them.  I was a bit concerned as I had not yet printed out the few organizer details for some clients - py rental info or Sch C data - which I like to include with the engagement letters.  I think it helps them to see what they might need for current year.

[M7047]

I was really worried about how this was going to play out, but it's really not hard at all. After installing ATX there's a QR code to register with an app or web extension. I always have my phone with me so I chose an app. I went with 2FAS as they don't require any of your personal data. Once downloaded, and the QR code is scanned you'll receive a 6 digit code to enter into ATX. The codes refresh every 30 seconds. When you open or if you have to log back into ATX for being idle or whatever you will repeat the same process, enter your password and then a screen will ask for the code. Open the app And it will be there to enter. I have to have the steps given to me normally, so I hope this helps someone.

 

[BulldogTom]

I know this is a stupid question, but since we went to 2FA, will ATX stop making us change the Password every 90 days?  Seems redundant.

Tom
Longview, TX

[M7047]

1 hour ago, BulldogTom said:

I know this is a stupid question, but since we went to 2FA, will ATX stop making us change the Password every 90 days?  Seems redundant.

Tom
Longview, TX

I seriously doubt it as that's a frontline security step and the 2FA is a backup  

[Margaret CPA in OH]

I guess we shall see in about 90 days!

[TexTaxToo]

On 12/24/2024 at 12:30 PM, G2R said:

There's a web address at the bottom of the QR code that you can copy and enter into the "secret code" section of the authenticator extension.  

It is best practice to write down the "secret code" (and save it in a secure place) even if use use the QR code to set up the authenticator.  You will need the code if you lose your phone or it breaks, and you need to set it up on a new phone.

[DANRVAN]

On 12/23/2024 at 2:04 PM, G2R said:

I downloaded the Authenticator.cc browser extension in Chrome.

That works really slick!  Once you get it set up it only takes seconds to copy and paste,  then you are good to go.  No other devices needed.

Thank you for the post!!!

 

[DANRVAN]

On 12/23/2024 at 7:38 PM, Slippery Pencil said:

How did you scan the qr code w/ the browser based authenticator?

You do not have to scan the code.  

Once you have it set up, all you have to do is point to the authenticator which you have already pinned.  It will display the 6 digit codes for each ATX program.  Then click on the 6 digit code and paste it to ATX log-in.

Super easy to use!

[mcb39]

Now, you lost me or I have just worked too many hours already today.  I will be like Scarlett O"Hara and "think about it tomorrow"!