Website: https://www.daito.io/

Why use 2FA?

Two-step authentication, in practice, is like a temporary second password that changes every 30 seconds. By requiring a second form of identification, 2FA prevents unauthorized access even if someone obtains your password. Popular tools such as Authy, Microsoft Authenticator and Google Authenticator help you easily implement this type of security.

[caption id="attachment_41" align="aligncenter" width="1200"]

Fonte: https://www.manageengine.com/[/caption]

As you can see in the image above, 2FA is a secondary step after entering the main password into the system and can be enabled via an authentication app, SMS, WhatsApp, Telegram or even physical hardware such as Youbico, Cisco Duo, Key-ID and others easily found on the internet.

It's important to bear in mind that 2FA refers to the second verification step and MFA (Multifactor Authentication) is the use of two or more steps after the main login. In various services, such as Google, for example, we can use MFA by adding various 2FA options: SMS (although this is not very secure), Physical Token, Authentication Application and the like. Or even require, in some services, in addition to the 2FA code, other codes according to what has been registered in the access account.

Dommon challenges in implementing 2FA

In corporate environments or specific projects, setting up 2FA can be a challenge. The need to install authentication applications on all users' devices and the management of shared accounts, where the access code is linked to a person's device, are common problems that complicate the adoption of 2FA.

Although it's not the safest practice to centralize 2FA in one place, it can be the best solution for the need to share accounts that have unique access. For example, social networks and certain systems, because of the bureaucracy of having to ask someone else for a code, end up not activating 2FA and make the process more insecure.

Daito: The solution for simplified authentication

Daito is an innovative response to these challenges. With this tool, you can create groups and users, register access codes and manage permissions centrally, making 2FA management simple and efficient. The administrator account is able to create the groups and, when creating a 2FA, associate the groups that will be allowed to access the codes created.

Creating your Daito account

Go to: https://www.daito.io/ and click on Start trial. Fill in your users and continue.

Creating users in Daito

Creating users in Daito is the same as in any other system. The detail here is that you define them as Member or Admin, depending on the responsibility the user will have in the system. Or, if you use SAML (SSO), you can configure it through this same screen with Azure AD, Google Workspace or customized.

Setting up groups in Daito

The first step I recommend is to create groups to better organize your passwords and then grant access to the team. In the example below, I'm creating a group for 2FA social networks.

Create the 2FA codes

Once the users and groups have been created, the next step is to create the 2FA codes according to the service you want. You can add the OTP secret key, scan the QR Code or upload the QR Code image. Whichever way you see fit.

Get the registered codes

Once all the steps have been completed, simply click on the button next to the service logo to obtain the codes as shown on the screen below.

2FA Shared SMS

Daito is introducing a feature that could be very useful in some contexts similar to 2FA by authentication code: a shared SMS box. This form of sharing is ideal for situations where the verification code is received via SMS, facilitating access to shared accounts when necessary. It has been in Beta for some time but I believe it will soon be rolled out to all users.

Other options for Daito

Although there are other solutions on the market such as Cerby, Group2fa and Shared2fa, Daito stands out for its security certifications and audits, which reinforce the tool's reliability and effectiveness.

Conclusion

Adopting two-step authentication is an important step in guaranteeing the online security of accounts, whether personal or professional. With tools like Daito, the process of implementing 2FA for your team becomes easier and more practical.

Daito offers 14 days free and you can create an account by clicking here.