Your events are your passion, so protecting them should be of top priority! When it comes to selling tickets on your ticketing platform, you’re handling sensitive financial details that need to be locked down tight. That’s where two-factor authentication (2FA) comes in. Sure, it might take an extra few seconds to complete your login, but those moments are a small price in exchange for the peace of mind you’ll gain knowing your account is secure from hackers and other bad actors.

What is two-factor authentication and why do I need it?

Because of the large amounts of attendee data, events are a perfect target for phishing attacks. This includes the data and financial information housed in your ticketing platform. At TicketLeap, we want to secure your account to prevent your account from getting into the wrong hands. What’s one important way we prevent this? We make sure your account has two-factor authentication!

Even with a super complex password, your account is still at risk without this extra barrier of protection. Two-factor authentication requires you to verify your login with a code sent to an external device. That way, even if someone cracked your password, your account is still safe! 

According to the U.S. Cyber Defense Agency, the use of 2FA on your accounts makes you 99% less likely to be hacked. At the end of the day, this extra layer or protection is a critical element to keeping your online accounts secure. Opting against using 2FA puts both you and your accounts at significant risk.

How does two-factor authentication work on TicketLeap?

It’s simple! You can set up two-factor authentication in just minutes and choose to receive a code when you log in through either text or an authentication app such as Google Authenticator or Duo Mobile. If multiple people need access to your account (we’ll talk more about this in a second), an authentication app may be the best option for you. If you want to learn more about how our 2FA feature works, visit this help article!

How to make your login more efficient while staying secure

Wanting to avoid entering a code every time you log into your account? When you log in from a private computer or mobile device (such as your personal laptop or phone), just click the “Remember Me” box at the bottom of the login form. This will keep you logged in for the next 30 days. Keep in mind however, if you have your settings to delete cookies when closing your browser, this feature will not work.

What if multiple staff members need to access your account?

TicketLeap is a powerful ticketing system with role-based permissions that you can assign to your team members. That way, each person in your organization should have their own login credentials and specialized view of your account. Depending on the type of role they’re assigned, some roles will require two-factor authentication while others won’t. This will be important to coordinate, especially to ensure everyone who does need two-factor authentication can access it.

Only users with the following roles require two-factor authentication to be enabled:

• Owner accounts (the account that created the organization)
• Admin
• Finance

If certain staff members don’t need access to the financial portions of our TicketLeap (e.g., payouts, bank account info), then you can give them one or more of the following roles to skip two-factor authentication:

• Events Manager: This role helps create and update event listings, including creating and editing events, changing the privacy settings, updating your fees and sales tax, and creating or modifying discounts.
• Box Office Manager: This role deals with your ticket buyers and attendees, including scanning and selling tickets onsite, running reports, managing order details, issuing refunds, and processing ticket exchanges.
• Ticket Check-In: This role just has access to our mobile ticket scanning app and your attendees report.
• Ticket Sales: This role has access to our box office feature on desktop and our ticket selling app.

Additionally, if you use TicketLeap features regularly but don’t typically need access to your payment settings or sales report, you can create one of these user accounts for yourself to manage your day-to-day tasks without needing 2FA to log in. 

Quick tip: You can set up a user with multiple permissions as needed. For example, a user that has both Events Manager and Box Office Manager roles.

Final thoughts on two-factor authentication

As event organizers, we know your focus is on creating unforgettable experiences for your audiences — but safeguarding your business is just as important. While two-factor authentication might take a few extra seconds during login, it’s a small investment of time that’s worth the immense security it brings. Protecting your accounts from unauthorized access ensures your financial information, attendee data, and event details stay secure for years to come!