Two step verification (sometimes called multi-factor authentication, or 2 factor authentication) is an additional level of security for your REDCap account. It will require you to sign in with an additional step along with your REDCap username and password. You will need to complete two-step verification every time you sign into REDCap.
At Sign-in
You must still sign in with your REDCap username and password, which are different to your normal University sign-in details. If you have forgotten your REDCap sign-in details, please contact [email protected]; we can help with username reminders and password resets.
After you have typed your REDCap username and password, you will see the following dialogue box showing your two-step verification options, which can either be email or an authenticator app:
Please note you will only be required to do one of the two verification options to sign in.
Email
Your REDCap account will automatically use your primary email address used to set up your account as your default email two-step verification option. You do not need to set this up yourself. The email address the code will be sent to can be seen under the email option on the initial two-step verification dialogue box (pictured above). If this email is incorrect, please contact [email protected] to get this corrected.
After clicking on the email option, REDCap will send a six-digit code to your email address, which can be typed into the dialogue box on REDCap.
The email will come from [email protected]. The code will expire in 2 minutes, and if you don’t manage to use the code in this time, you’ll need to generate a new one by signing into REDCap again.
Authenticator app
If you want to use an authenticator app, you will need to set this up. When clicking on the app option for the first time, you will be shown the following instructions:
The following step-by-step instructions are for the Microsoft authenticator app, which is the app we recommend using.
- After clicking on the app option for the first time, the instructions will display a QR code. Open the Microsoft authenticator app and select the QR code option in the bottom right corner. If you don’t have this option, you can instead click on the plus (+) button in the top right corner, then select ‘Other account’. This should open the QR code scanner for your app.
- Scan the QR code displayed on the screen. If you can’t see it, click on the ‘View QR code in separate window’ option. If you still can’t see it, select ‘enter code manually’ on your app and input the ‘Key/secret’ code displayed on REDCap.
- Once your REDCap account has been added, click on your REDCap account in your app.
- This will display a rotating six-digit code. When prompted by REDCap, input the current code from your app into REDCap. Please do not input a previous code as this will not work.
- Once this has been set up, to sign in with your app, just input the six-digit code from your app when prompted by REDCap.
Resetting your authenticator app
If you have lost access to your authenticator app (e.g. you got a new phone, uninstalled your app, removed your REDCap account from your app, etc) but still have access to your primary email, you can sign in to your REDCap account with your email two-step verification method and set up your app again. Just click on the ‘Profile’ button in the top right corner of REDCap, then under ‘login-related options’, click on ‘Set up Google/Microsoft Authenticator for two-step login’.
This will bring up the instructions for setting this up. Please refer to the Authenticator App section for guidance on how to do this.
Please note that you cannot reset your email verification method yourself. If your primary email address for your REDCap account is incorrect, please contact [email protected] to get this corrected. If you can’t access your email, you will need to speak to your IT provider to get this access corrected. For UoA members, you can contact [email protected] for any email access queries or issues. For those external to UoA, including NHS staff, you will need to speak to the relevant IT support as we cannot assist with access issues for accounts outside the UoA domain.
If you require more information, advice or support please email us at [email protected]