Knowledge Base

---

Search by either entering keywords/KB_ID or by selecting a category.

KB ID: 5528

Product: TS5010 Series | TS6000 Series | TS5020 Series | TS71210 Series | TS3010 Series | TS3020 Series | TS-Essentials Series 2022 | TS3030 Series | TS Essentials Series 2025

How-to enable Two-Factor Authentication login on TeraStation

Applies to TeraStation 3010 / 3020 / 5010  series v5.38 or later
                                       6000 Series v5.68 or later
                                       5020 / 3030 / 7010 series
Notes:

• Enabling TeraStation Email notification is required to enable two-factor authentication, please refer to this KB article for the configuration.

•Two-factor authentication requires an authenticator app to be installed onto your mobile device. The following authenticator apps are supported:

 Google Authenticator
 Microsoft Authenticator
 Duo Mobile
 Twilio Authy

• After enabling two-factor authentication, if you are not able to receive an authentication code through the configured authenticator app or email address, you will not be able to login to the TeraStation. Please refer to the “Resetting the Administrator Password” section from the user manual about "initialize the settings by the init button".

1.    From WEBUI, navigate to the File Sharing tab.
2.    Click the settings icon to the right of “Users”.

 

3.    Select the user which two-factor authentication needs to be enabled.
You will only be able to configure two-factor authentication for a user you are currently logged in as.

4.    Click Two-Factor Authentication

5.    Click Next.
 
If you have not enabled the email notification you will not be able to continue this configuration.

6.    Enter an email address as an alternative method to receive the verification code and click Next.
Optional: Click “Send Test Email” to send a test email sent to the entered email address to confirm that the email an email settings are correct.

Note: The entered email address will replace the existing email address of the user account. You can still change this email address later from the user settings page.

7.    Use your mobile authenticator app to scan the displayed QR code.
Alternatively, enter the setup key into the app. 
Click Next after the app establishes the connection with the TeraStation.

8.    Open the installed authenticator app on your mobile device. 
Here we use Google Authenticator for demonstration. Click the Add icon on the app.
 
9.    Select “Scan a QR code” or “Enter a setup key” as desire.

Scan a QR code

Use your phone camera to scan the QR code displayed on the TeraStation Two-factor authentication setup wizard.

Enter a setup key

• Enter a desired Account name for identifying the TeraStation NAS and the user account.

• Enter the Setup Key displayed on the TeraStation Two-factor authentication setup wizard.

• Select “Time based” as the Type of the key. (recommended)

10.    The TeraStation account has been added to the authenticator app successfully.

11.    Enter the 6-digit verification code displayed on the authenticator app and click Next.
Note: If authentication fails even if the verification code is vaild, make sure the time settings on both the TeraStation and the mobile device are the same.

12.    Two-factor authentication configuration is complete. Click close.

Two-factor authentication status will show Enabled to the user configured.

13.    A verification code will be required the next time when the two-factor authentication enabled user login to WEBUI.
Enter the verification code displayed on the authenticator app

Or click “Send code by email” to receive the code from the alternative email address you configured.