Interchange: Two-factor authentication (2FA) - Using a Yubico authenticator on your desktop

As part of our work to increase our security arrangements, from 15 April we’re adding two-factor authentication (2FA) to our secure website, Interchange. 

You can use a mobile device (mobile phone or tablet) for 2FA. However, if you do not want to use a mobile phone or tablet, you can purchase and use a hardware authenticator called a YubiKey, manufactured by Yubico.

This is a USB device linked to the Yubico desktop authenticator app. This has been tested with the My Cambridge 2FA that is used to access Interchange. You will need both the Yubico desktop authenticator app and a Yubikey hardware authenticator compatible with the app. 

You can purchase a Yubikey from major UK retailers but please check the list of compatible YubiKeys for the Yubico Authenticator app before purchasing:

https://support.yubico.com/hc/en-us/articles/360013789259-Using-Your-YubiKey-with-Authenticator-Codes

Yubico authenticator application installation

1: Use any browser and click on the link below to download the Yubico Authenticator software:

https://www.yubico.com/products/yubico-authenticator/

2: Choose whether you want to install the application on your Windows, Mac, or Linux desktop.

3: Install the downloaded application.

Using the YubiKey and Yubico Authenticator application

1: Check the list of compatible YubiKey for the Yubico Authenticator app:

https://support.yubico.com/hc/en-us/articles/360013789259-Using-Your-YubiKey-with-Authenticator-Codes

2: Insert the compatible YubiKey into your system.

You will get this screen once after clicking on the Yubico Authenticator app:

3: Place the Interchange login screen showing the QR code/secret key next to the Yubico Authenticator app screen. Click on the yellow highlighted area.

Both the Interchange login screen window and the authenticator app window need to be visible on your screen. 

4: Click on Add Account

5: Click on the Scan QR code. It will automatic scan the QR code from the screen.

6: After the QR code has been scanned, the related account information will be automatically populated. Click on the save button.

7: The passkey will be generated for your account and will be enabled for 30 seconds. Enter the code in the Code box. If this is not done within 30 seconds, a new code will be generated.