Complete Guide to Setting Up Two-Step Authentication (2FA) in Inmovilla

Two-factor authentication, commonly known as 2FA, is an additional security layer implemented during the login process in Inmovilla. Beyond entering the usual credentials —username and password— each user must validate a unique temporary code to access their account, significantly enhancing protection against unauthorized access.

This measure is mandatory for all agencies using the platform and is designed to prevent risks associated with phishing attempts, credential theft, and fraudulent access. To ensure a smooth experience and avoid unnecessary lockouts, it is essential to verify that the email linked to each user is up to date and correctly registered before activating or using the second authentication factor.

What is 2FA and How is it Integrated into Inmovilla?

Two-step authentication adds an extra verification level after entering the username and password. In Inmovilla, this second step can be done through two main methods: a temporary code sent by email or a code generated by a mobile authentication app.

The 2FA login process is simple and secure:

• The user enters their usual credentials.

• Inmovilla requests a temporary security code to verify identity.

• The code is received in the registered email or generated in an authenticator app installed on the mobile device.

• Once the correct code is validated, access to the platform is granted.

This mechanism ensures that even if a password is compromised, unauthorized access is blocked without the temporary code, protecting sensitive information related to commercial management, contacts, and internal data specific to each agency.

Pre-Verification: Thorough Review of Each User's Email

The email assigned to each user is a key element in implementing 2FA, as the access code is initially sent to this address. If the email is misspelled, does not exist, or belongs to an inaccessible account, the user will not be able to receive the code needed to log in.

Therefore, agency managers must perform a detailed review of each user profile through Settings > Users, ensuring the email address is correct and up to date. This check is especially crucial before users configure authenticator apps.

When reviewing emails, it is advisable to verify the following aspects:

• That the email address is correctly written and free of typographical errors.

• That the user has real access and control over the associated mailbox.

• That a shared, obsolete, or unsupervised email has not been assigned by mistake.

• That the address corresponds to the correct user who should receive the access code.

Once the email is confirmed, each user can choose their preferred verification method from their personal profile.

Advanced Configuration: Define When the 2FA Code is Requested in Inmovilla

The platform offers agencies the option to customize when two-step authentication will be required. To access these options, follow this path within the Inmovilla administration area:

• Select Settings in the left sidebar.

• Go to the Options section.

• Stay on the General tab.

• Scroll down to the Two-Factor Authentication Settings section.

• Click the edit option to adjust the parameters according to your agency's needs.

From this section, the agency can decide whether the two-factor code is requested at every login for maximum security, or only when a new device is detected, thus facilitating the experience of users who regularly work from the same equipment.

Requesting the code at every access increases the protection level, while limiting the request to unrecognized devices offers a balance between security and convenience, adapting to different workflows and internal policies.

Choosing the Authentication Method: Code by Email or Authenticator App

Each user can manage their preferred 2FA method from the My Profile section. In the area dedicated to two-factor authentication, one can select between receiving the code by email or using a specialized mobile app.

Security Code Sent by Email

This option consists of receiving a temporary code directly in the email registered in the user's profile. It is ideal for those who prefer a simple method and have immediate access to their email.

To use this method correctly, follow these steps:

• Access the mailbox associated with the user account.

• Locate the message containing the temporary code.

• Copy or manually enter the code on the Inmovilla verification screen.

• Complete the login process before the code expires.

If multiple codes are requested consecutively, multiple messages will be received. It is important to use the code corresponding to the last active request to ensure correct access.

Code Generated by Authentication App

Authenticator apps, such as Google Authenticator, generate temporary codes directly from the mobile device without requiring a constant internet connection or dependence on email.

This method is especially useful if email messages experience delays or if you want to avoid relying on the mailbox for each login, providing a faster and more reliable experience.

Procedure to Activate Google Authenticator in Inmovilla

Setting up authentication via mobile app is done individually from each user's personal profile, not from the agency's global settings. Before starting, it is essential to have access to the linked email, as the first validation might require it.

Follow these steps to activate Google Authenticator:

• Install the Google Authenticator app on your mobile device.

• Access My Profile within Inmovilla.

• Locate the two-factor authentication section.

• Select the option to configure authentication via mobile app.

• Open the configuration window that will display a QR code.

• Scan the QR code with Google Authenticator on your mobile.

• Enter the temporary numeric code generated by the app into Inmovilla.

• Confirm activation to save the secure link between the account and the app.

The QR code establishes the secure connection between the Inmovilla profile and the Google Authenticator app on the mobile device. Once the temporary code is confirmed, the app is linked to the account, and all future logins will require the code generated by this app to complete access.

Login Process Using Google Authenticator

With the mobile authentication method activated, the login procedure changes only in the last step. After entering the username and password, Inmovilla will request a temporary code generated by the authenticator app.

The access flow is as follows:

• Enter the usual credentials.

• Open Google Authenticator on the mobile device.

• Select the entry corresponding to Inmovilla.

• Check the temporary code displayed.

• Enter the code on the Inmovilla verification screen.

• Confirm access to enter the platform.

The codes generated by the app change periodically every few seconds. Therefore, the code must be copied while it is visible; if it changes before validating access, simply enter the next generated code.

Recommendations for an Organized Implementation in the Agency

Activating two-factor authentication will be more efficient if done in a planned and coordinated manner. It is recommended that the agency follows a structured process that includes reviewing emails and individual configuration of verification methods by each user.

A recommended sequence could be:

• Review and validate the email addresses of all registered users.

• Correct or update incomplete or outdated emails from user management.

• Define in Settings whether the 2FA code will be requested at every login or only when using new devices.

• Inform the team about the obligation to complete verification when accessing Inmovilla.

• Allow each user to configure Google Authenticator or another method according to their preferences.

Summary: Strengthening Inmovilla Security with Two-Factor Authentication

Implementing two-factor authentication provides an essential additional layer to protect access to Inmovilla, requiring a temporary code after the password. The fundamental requirement to start is having a correct and accessible email in each user profile.

From Settings > Options > General, the agency can set policies for requesting the 2FA code. Subsequently, each user can choose between receiving the code by email or activating Google Authenticator from My Profile. With these configurations properly implemented, the team will have robust and reliable protection for platform access.