Why two-factor authentication is required

Fiskora requires two-factor authentication (2FA) before you can connect a KSeF certificate. This article explains the reason and how to set up 2FA.

Why it is required

A KSeF certificate lets software issue invoices as your business. Assume that a person gets into your Fiskora account with only your password. That person can connect, replace or misuse the access. A second factor makes this much more difficult. If your password leaks, the attacker also needs your phone.

We think this is a reasonable requirement, because Fiskora holds a certificate that acts for your business.

What you need

A smartphone with an authenticator app. Any standard authenticator app that supports time-based codes is correct.
Your Fiskora account.

Steps

Sign in to Fiskora.
Open Settings and find the two-factor authentication option.
Start the setup. Fiskora shows a QR code.
Open your authenticator app.
Scan the code.
Enter the six-digit code that the app shows, to confirm.
Save the recovery information that Fiskora shows you. Keep it in a safe place, separate from your phone.

After this setup, sign-in needs your password and a code from the app.

Good habits

Before you change devices, back up your authenticator app or learn how to move it to a new phone.
Do not take screenshots of the QR code. Do not leave them in your photo gallery.
Use a unique password in addition to 2FA.

If you lose your phone

If Fiskora gave you recovery information, use it. If not, contact support@fiskora.com. We can need to verify your identity before we help. This takes time, and we reply within 2 working days. For this reason, it is important to save the recovery information.

Does 2FA slow me down?

Only a little. You enter a code at sign-in, which takes a few seconds. After the first week, most people do not notice it.

Next, see “Connect your KSeF certificate”.