OnTrackLogoNextcloud allows you to protect access to your user account using MFA or 2-step verification. Any member of staff can use MFA, but it is particularly important for administrator accounts. This article describes how to do it, including using Google Authenticator.

Google Authenticator App

Start by installing the free TOTPAuthentication app for your mobile device (if you haven't already).

  1. Open the App Store on your iPhone.
  2. Search for TOTP Authenticator.
  3. Install the TOTP Authenticator app.

Now you are ready to set up your account to use the Google Authenticator app.



Now you can log on to your school cloud with the user account that you want to protect.

  1. Click your Avatar > Settings.
  2. Click Security in the left pane.
  3. Click the checkbox to Enable TOTP.
  4. Open the app on your mobile phone.
  5. Click the plus button on the app to add a new account.
  6. Use the Scan option and point your mobile phone camera at the QR code presented on the screen.
  7. This will create a new account on the mobile phone app.
  8. Enter a code presented in the app into the Authentication code field, and click Verify.

Your user account is now protected with Two-Factor Authentication. You will need to enter the mobile phone app code, every time you log on to Nextcloud. Now that you've created an account on the phone app, you might like to make edits to it, like adding your own icon.


Backup codes

A very important step is to create backup codes that can be used if your mobile phone is lost or stolen.

  1. Click your Avatar > Settings.
  2. Click Security in the left pane.
  3. Click the Generate backup codes button.

This will create a list of 10 backup codes. I recommend that you print off a copy of this list, test the first backup code, and keep the list in a safe place.