Two-Factor Authentication

Our dashboard supports multiple forms of multi-factor authentication and some are used in different scenarios.

Sudo mode

Sensitive account changes (such as changing your email or creating an API token) require sudo mode. Most sudo mode operations require a form of two-factor.

Passkeys vs Hardware Keys

Hardware keys are a form of pure two-factor authentication. You can use a passkey as a hardware key if you only want to allow it as a method of 2FA.

Passkeys can log into your account directly. If you’d also like to use your hardware key (YubiKey) or an on-device/password-manager passkey as a login method in addition to 2FA, register it as a passkey instead. A passkey already counts as a form of 2FA for any sudo mode or similar requests.

Both YubiKeys and passkeys can be registered in either mode.

Available 2FA methods

We support multiple two-factor authentication methods, most of which can be used in parallel.

Adding TOTP

1. Head over to https://dash.galaxygate.net/account/security
2. Under the MFA section, click on “Set Up”
3. Follow the instructions on screen to configure and validate your TOTP device
4. Save your 2FA recovery code

We support most available TOTP applications:

• Google Authenticator
• Microsoft Authenticator
• Bitwarden Authenticator
• Bitwarden
• Proton Pass

Warning

Our TOTP setup uses modern SHA256. Some apps, like Google Authenticator, assume a default of SHA1. Our QR code and OTP URLs provide the correct algorithm, so make sure to copy or scan our QR code rather than typing in the secret only.

Adding hardware keys

1. Head over to https://dash.galaxygate.net/account/security
2. Hit “Add Security Key” under the Security Keys section
3. Give your security key a name
4. Follow the setup instructions and tap your key at the end

Info

If you want to set up a passkey, follow the passkey instructions instead.

Adding a passkey

1. Head over to https://dash.galaxygate.net/account/security
2. Under the “Passkeys” section, click on “Add passkey”
3. Give your passkey a name
4. Follow the setup instructions for a passkey