Product Documentation
ShareFile
View PDF

Two Step Verification

June 25, 2025
Contributed by: 
P

Two-step verification enhances security by using your phone as an additional layer of protection. Users can link a phone number to receive verification codes via SMS or voice call, or they can opt to use an authenticator app for added convenience and security.

Two-step verification is required by default for all Employee users. Admins who prefer to disable the two-step verification enforcement for Employee users can opt-out by filling a waiver.

Advisory

Filling out the opt-out waiver turns off the automatic Two-step verification enforcement of this feature. However, both Employee and Client users can still choose to turn it on themselves to help keep their accounts more secure - even if the admin hasn’t requested it.

Go to Personal Security for information on how to set up Two-step verification.

Supported Apps

Once enabled, these apps may use Two-Step verification for authentication:

  • ShareFile for Windows
  • ShareFile for Mac
  • ShareFile for Outlook
  • ShareFile for iOS
  • ShareFile for Android

Note:

ShareFile for Outlook users may need to re-authenticate to their plugin after enabling Two-Step Verification.

Unsupported Apps

The following apps do not support the Two-Step Verification feature. If Two-Step Verification is enabled for your account, you will need to generate an application-specific password to login to these tools:

  • FTP
  • User Management Tool
  • Custom API script
  • Storage zone controller configuration page
  • Legacy Applications

Enforce Two Step Verification

Administrators have the option to require Employee users, Client users, or both to enroll and use Two-Step Verification for authentication.

To enforce Two Step Verification, the account Administrator must have the access company account permissions setting. Go to Admin Settings > Security > Login & Security Policy > Two-Step Verification.

Refer to the login and security policy for additional infomation.

Important!

  • When this feature is enabled, Two-Step Verification options will be available to all users on the account.

  • To increase authentication security, all accounts enforce two-step verification for Employee users. Account administrators will not be able to disable Require employee users” to use Two-step verification until the Master Administrator completes a legally binding opt-out waiver.

Remove Two-Step Verification Enforcement

If you are the Master Administrator, you can locate the opt-out waiver in Admin Settings > Security > Login & Security Policy > Two-Step Verification section.

Follow these steps to opt-out:

  1. Select the Complete Opt-Out Waiver link.

    Enforce Verification

  2. Confirm you have the authority to to assume the risks and liabilities of disabling Two-Step verification.

    Enforce Verification 4

  3. Choose the reason(s) why you do not want the content of the ShareFile account protected by Two-Step verification:

    Enforce Verification 5

  4. Click Decline Two-Step Verification:

    Enforce Verification 5

    You receive a confirmation message:

    Enforce Verification 6

  5. After you have completed the opt-out waiver, the checkbox to clear Require for employee users becomes available.

    Enforce Verification 6

  6. Make your selections and click Save at the botom of the screen to apply changes.

Advisory!

If the account administrator declines two-step verification enforcement, previously enrolled users still need to disable this feature from their personal account settings to discontinue use.

Reset user phone number

  • Administrators with Manage employees permission can reset two-step verification for all users except the Master Administrator.

  • An Account Owner that requires their primary phone number to be reset must contact ShareFile Support for assistance.

Instructions to reset user phone number for Administrators with Manage employees permissions:

  1. Navigate to People > Browse Employees or Browse client contacts.

  2. Select the employee user that requires a reset.

  3. Under Actions, select Reset two-step verification.

    A confirmation message displays.

  4. Select Reset.

Instructions for Client and Employee users:

When the admin requests a reset for an employee or client user, an email is sent. The user has 15 minutes to complete the reset once the email is sent.

Use the following instructions to complete a two-step verification reset.

  1. Select the link provided in the email.

    Note:

    This reset link will expire after 15 minutes. Each time the administrator sends a link to reset, the previous reset link expires.

  2. Once authenticated, users may be prompted to register a new phone number to use for two-step verification if the account enforces that two-step verification is used for their type of user.

    Note:

    If the user is not prompted to register a new phone number, they will need to navigate to Personal Settings > Personal Security > Two-Step Verification where they can add choose to enable two-step verification for their user account and then add a phone number and verify it. They were not prompted because two-step verification is enabled on the account but not required for their user type.

Disable Two Step Verification

If Two-Step Verification is not enforced on the account, you may disable the feature for your user account if you are already enrolled to receive verification codes.

To locate the option, disable this feature:

  1. Navigate to Settings > Personal Settings > Personal Security > Two-step Verification. Scroll down the page to Disable Two-Step Verification.

Note:

The option to disable two-step verification for your account will only appear if feature is not enforced or required for your user group.

The account administrator can confirm if Two-step verification is required for employee or client users by:

  1. Go to Settings > Admin Settings > Security > Login & Security Policy > Two-step Verification.

If you are unable to change these options please see Enforce Two-step Verification.

Two Step Verification
June 25, 2025
Contributed by: 
P
June 25, 2025
Contributed by: 
P

In this article

Site feedback | Privacy and legal terms | Cookie preferences
©Progress Software all rights reserved