2FA Security — build your quote

The 2FA Security add-on adds two-factor authentication to RDPlus. Even if someone learns a user's password, they can't open that user's session without a second, one-time code.

Each login combines two factors:

• The user's Windows credentials (username and password)
• A one-time security code from an authenticator app on their phone, or sent by SMS or email

What it protects

• RDPlus Web Portal: both HTML5 browser sessions and RemoteApp connections
• RDPlus Connection Client: generated clients with 2FA support enabled

Standard Remote Desktop (mstsc) connections are blocked for users who have 2FA enabled, so the second factor can't be bypassed. If needed, an administrator can whitelist specific users to keep using a standard RDP client.

Requirements

Server side:

• RDPlus Enterprise Edition (2FA is not available for Desktop Edition)
• The server clock must be accurate. Codes are time-based, so the server and users' devices need to agree on the time.

User side, using one of these:

• A smartphone or tablet with an authenticator app such as Authy, Google Authenticator or Microsoft Authenticator
• A mobile number to receive codes by SMS. This needs a Twilio account for sending SMS.
• An email address to receive codes by email. This needs an SMTP mail server configured.

Easy to set up

Turn on 2FA from the Add-ons section of the RDPlus AdminTool, then choose which users or groups must use it. You can also pick how each user receives their code: authenticator app (the default), SMS or email. If a user loses or replaces their phone, one click resets their account, and they set it up again at their next login.

Easy to use

1. First login: after entering their password, the user scans a QR code shown on screen with their authenticator app, or chooses SMS.
2. Every login after that: the user enters their password plus the current 6-digit code from the app, SMS or email.

An extra layer of security

Authenticator codes change about every 30 seconds and can only be used once, so a stolen or reused password alone isn't enough to get in. Authenticator apps work offline and need no extra hardware. They're available for iPhone, iPad and Android.

Licensing

2FA Security is licensed per server and includes 12 months of updates and Australian-based support. In a multi-server setup, install it on the server users connect through (the gateway).