
Two-Step Login, which goes by many different names, is a highly-recommended security practice for securing access to websites and applications. Other names for this practice are Two-Factor Authentication (2FA), 2-Step Verification, and Multi-Factor Authentication. We'll use 2FA for the rest of this guide.

The main premise behind 2FA is that after you enter your password (the first step, method, factor, or evidence in proving your identity), you will be prompted to enter a token generated either by an Authenticator app, a hardware security key (like Yubikey), or sent via SMS (text message) to your phone. These days SMS is considered an unsafe method for sending the 2FA token due to the possibility that mailicious actors could intercept your SMS messages and thus gain access to your 2FA protected accounts. Most banks still use SMS as the 2FA token delivery method and hopefully they will upgrade their security practice soon.

Your <a href="https://ayamsecure.com/services/secrets" target="_blank">Secrets</a> password manager has a built-in Authenticator app that you can use with any website that supports Authenticator apps as a 2FA method. Not all websites support Authenticator apps, but if they do, then you should make use of the Authenticator app in your Secrets password manager.

This article will guide you in setting up Secrets as your Authenticator 2FA method for your Google account and Paypal account. After this, you should be able to set up Secrets as your Authenticator app for other websites, such as social media sites, financial sites, etc.

Enabling 2FA on your accounts at Google, Paypal and others will require you to complete a secondary step (entering the 2FA token generated in Secrets) each time you log in, in addition to your primary login method, which is your account password. When setting up 2FA on your various accounts, remember that it is best practice to set up multiple 2FA methods in case you lose access to one of your 2FA methods. You'll see that Google provides multiple 2FA methods that you can set up but Paypal only provides Authenticator app or the use of a Hardware Security Key, which is a more advanced 2FA method that we will cover in a future article.

### Guide to setting up 2FA on Google & Paypal:

Table of Contents:

- [Step 2: Set up 2FA on your Google account](#step-2-set-up-2fa-on-your-google-account)
- [Step 3: Set up 2FA on your Paypal account](#step-3-set-up-2fa-on-your-paypal-account)

---

### Step 1: Sign in to your Google Account

If you're already signed in to your Google account, like via Gmail, then click on your profile icon on the upper right and select `Manage your Google Account`. Otherwise, follow <a href="https://myaccount.google.com" target="_blank">this link to directly navigate to your Google account management</a>, where we will set up the 2FA methods.

![](/posts/post-140.png#image-center)

2FA set up in Secrets is best done via the Bitwarden Browser Extension apps or Desktop apps.

### Step 2: Set up 2FA on your Google account

From the Google Account page, select `Security` on the left sidebar and then select `2-Step Verification` under "How you sign in to Google".

![](/posts/post-122.png#image-center)

From the page that pops up, select `Get started`.

![](/posts/post-123.png#image-center)

Google first forces you to set up a phone number for SMS as a default 2FA method. So go ahead and do that. Enter your phone number and then enter the 6-digit passcode that Google sends to your phone.

![](/posts/post-124.png#image-center)

If it all looks good, select `Turn on`.

![](/posts/post-125.png#image-center)

And then you'll be back on the `Security` page and you can confirm that you have the default 2FA method set up. Next, we will set up Authenticator app as a 2FA method.

At the bottom of the 2FA section, select the button that says `Authenticator`.

![](/posts/post-126.png#image-center)

You can also navigate to the Authenticator app settings page by clicking once again on the right arrow at `2-Step Verification` and then selecting `Authenticator app`.

![](/posts/post-127.png#image-center)

From the `Authenticator app` page, select `Set up authenticator`.

![](/posts/post-128.png#image-center)

The page will initially only show you a QR code that you can scan with your Secrets mobile app but it's easier to do this with the Browser Extension app. Select `Can't scan it?`.

![](/posts/post-129.png#image-center)

Now you'll be presented with the `secret key` that we will save in our Secrets login entry for this Google account. Copy the string of letters and number in Step 2.

![](/posts/post-130.png#image-center)

Open your Bitwarden Browser Extension App, select the login entry for this Google Account, click on `Edit`, and then in the input box below `Password` labeled `Authenticator key (TOTP)`, paste the string of letters and numbers. This is the `secret key` that Secrets will use to generate unique one-time passcodes (OTP) that will match what your Google account is expecting when it prompts you for the 2FA token.

![](/posts/post-133.png#image-center)

After clicking `Save`, you'll see that the `Verification code` field starts displaying a 6-digit 2FA token (or one-time passcode) that refreshes every 30 seconds. Copy this code and paste it in the Google account pop-up view for setting up your authenticator app and click `Verify`.

![](/posts/post-134.png#image-center)

If it all looks good, you'll now see that you have set up Authenticator as a 2FA method for your Google account.

![](/posts/post-135.png#image-center)

Click the back arrow to come back to the 2-Step Verification page, which should now show you that the more-secure `Authenticator app` has been selected by Google as your default 2FA method with your phone being a backup 2FA method. We should set up one more backup 2FA method, which is generating and saving 2FA backup codes. Click on `Backup codes`.

![](/posts/post-136.png#image-center)

Select `Get backup codes`.

![](/posts/post-137.png#image-center)

And now you'll be presented with 10 one-time use 2FA backup codes. These codes can give access to your account if someone knows your password so guard these backup codes just like they were a password. We recommend saving these backup codes in your Secrets login entry for this Google account and logging in to your Secrets account from multiple devices to avoid getting yourself locked out. You could also print these backup codes and put them in a bank safety deposit box.

![](/posts/post-138.png#image-center)

Back on the `2-Step Verification` page you'll see that you have `Authenticator app` set up as your default 2FA method, then your phone number as your first backup and the 2FA backup codes as a secondary backup. Now this a robust 2FA setup because there are multiple 2FA methods set up on this one account and it is very unlikely that you would be locked out of this account or that a bad actor might gain access to your account.

![](/posts/post-139.png#image-center)

Let's see what a login flow would look like now that you have 2FA set up on your Google account. Sign out or logout of your Google account and then sign in again.

![](/posts/post-141.png#image-center)

Enter your Google account password.

![](/posts/post-142.png#image-center)

Then you will be prompted to enter a `verification code` from your authenticator app, referring to the login entry in Secrets for this Google account.

![](/posts/post-143.png#image-center)

In the Bitwarden Browser Extension App, search for your login entry for this Google account and click on the far right clock icon to copy the verification code or OTP to your clipboard. If you're curious why a clock icon is shown for this 2FA token, it's because this token is a Time-based One Time Passcode that refreshes every 30 seconds.

![](/posts/post-144.png#image-center)

Alternatively, click on the view icon of this login entry and then from the `Verification code` line, click the copy icon on the far right to copy the verification code to your clipboard. It's ok if the timer reaches zero and expires, you have a few seconds to enter the passcode before you'll need to enter a refreshed one.

![](/posts/post-145.png#image-center)

On the Google login vew, paste the `Verification code` and click `Next`.

![](/posts/post-146.png#image-center)

That's it! You've set up Secrets as your Authenticator app for your Google account and now your Google account is better secured from bad actors.

### Step 3: Set up 2FA on your Paypal account

Along with securing your Google account with 2FA, you should also enable 2FA on your financial accounts and other accounts that are important to you or even just any website that offers it as an option. As an example, here are the steps to set up 2FA on your Paypal account.

Login to your <a href="https://www.paypal.com/signin" target="_blank">Paypal account</a>, click the settings icon on the upper right, then select `Security`, and then click on `Set up` to the right of `2-step verification`.

![](/posts/post-113.png#image-center)

Choose `Use an authenticator app`.

![](/posts/post-114.png#image-center)

Below the QR code, copy the `secret key` string of letters and numbers.

![](/posts/post-115.png#image-center)

In your Bitwarden Browser Extension App, find your Paypal login entry, click on `Edit` and in the `Authenticator key (TOTP)` field, paste the `secret key` and click `Save`. Now copy the 6-digit verification code from the Bitwarden app.

![](/posts/post-116.png#image-center)

And paste it in the Paypal prompt and click `Confirm`.

![](/posts/post-117.png#image-center)

If it all looks good, you'll see that `2-step verification` is now turned on in your Paypal account. Paypal currently doesn't offer 2FA backup codes as a backup method and only offer setting up a hardware security key as a secondary 2FA method. We'll cover that in a future article.

![](/posts/post-118.png#image-center)

There you have it! You have now secured your Google account and Paypal account with two-factor authentication.

If you need further help setting up 2FA on websites, please don't hesitate to reach out and [contact us](/contact).


How to set up Two-Step Login on Google and other websites


Password managers such as <a href="https://ayamsecure.com/services/secrets" target="_blank">Ayam Secure Secrets</a> (powered by Bitwarden) make it easy to store and access unique and secure passwords across all of your devices, keeping your online accounts safer than ever. Using Secrets, you won't need to dangerously repeat simple passwords or leave them exposed in unencrypted formats such as spreadsheets, documents, or sticky notes.

One of the best features of Secrets is the ability to safely and securely share passwords and other private data such as credit card information, WiFi passwords, etc. with others users in your Secrets Organization. This article will help you get started with a two-person organization so you can experience secure sharing in no time.

### Here is a step-by-step guide on how to use Organizations:

Table of Contents:

- [Step 2: Create your organization](#step-2-create-your-organization)
- [Step 3: Update your default collection](#step-3-update-your-default-collection)
- [Step 4: View all your Vault items](#step-4-view-all-your-vault-items)
- [Step 5: Move a vault item to your organization vault](#step-5-move-a-vault-item-to-your-organization-vault)
- [Step 6: Invite users to your organization](#step-6-invite-users-to-your-organization)
- [Step 7: Viewing vault items in the Browser Extension Apps](#step-7-viewing-vault-items-in-the-browser-extension-apps)

---

### Step 1: Sign in to your Ayam Secure Secrets Web Vault

Organization management happens primarily in the Secrets Web Vault (<a href="https://secrets.ayamsecure.com" target="_blank">secrets.ayamsecure.com</a>) rather than the browser extension apps.

### Step 2: Create your organization

Once you're signed in to your Web Vault, on the left-hand sidebar, under `All vaults`, you'll see `My vault`, which is your default personal vault and then an option to create a `New organization`. Go ahead and click that.

![](/posts/post-45.png#image-center)

On the New organization screen, give your organization a name and then enter the email that you used to sign up for Secrets, and click Submit.

![](/posts/post-47.png#image-center)

Once your organization is created, you will then be taken to your organization's vault and shown the `Default collection` of this vault.

> It's important to understand that now there is a personal vault that only you can access and an organization vault that can be accessed by members of the organization and no one else.

![](/posts/post-48.png#image-center)

Another important point to note is that vault items (such as logins, cards, identities, secure notes) can only belong to one vault, either your personal vault or the shared organization vault. Once you share a vault item from your personal vault to an organization vault, you will then have to access your organization vault to be able to edit this vault item.

Don't worry, it's much easier than this because on the home page of your Web Vault you can see the vault items from all your vaults together. Also, in the browser extension apps, you will be able to see vault items from all your vaults.

### Step 3: Update your default collection

Organization vaults store their vault items in a `collection`, which is just a group. You can have as many collections as you want. Go ahead and update the Default collection and give it a name that the members of your organization will recognize because when you share a vault item to an organization vault, you will have to select the collection that it gets added to.

![](/posts/post-49.png#image-center)

![](/posts/post-50.png#image-center)

### Step 4: View all your Vault items

Click on `Vaults` in the top menu bar and you will be taken to the home page of your Web Vault and it will be showing your vault items from all your vaults together. Under the `Owner` column, you can see which vault items belong to which vaults.

### Step 5: Move a vault item to your organization vault

If you want to move a vault item from your personal vault to the organization vault, click on the 3 dots menu icon on the far right of the vault item and select `Move to organization`.

![](/posts/post-51.png#image-center)

In the modal that pops up, select your organization and the collection in your organization to move this vault item to.

![](/posts/post-52.png#image-center)

Now, in the `All vaults` view, you can see in the Owner column the vault item now belongs to the organization vault.

![](/posts/post-53.png#image-center)

Instead of thinking of sharing vault items from your personal vault to the organization vault, it's better to think of `moving` vault items between vaults because as mentioned above, vault items can only belong to one vault at a time.

Now, from the left-hand sidebar, under `All vaults`, you can select `My vault` and the vault items will filter to show just the vault items in your personal vault. And likewise, you can select the organization vault to see just the vault items that are in the organization vault.

### Step 6: Invite members to your organization

Once your organization is setup, to invite other members to your organization (such as your family or team members), in your Web Vault, click on `Organizations` in the top menu bar, then the `Members` tab below your organization name and then click `Invite member`.

![](/posts/post-61.png#image-center)

In the modal that pops up, there are 2 tabs. In the `Role` tab, enter the email of the member you want to invite (ensure that they have already setup their Secrets account before inviting them to your organization and use the same email address that they setup their Secrets account with). Choose the role that this member should have. Owner and Admin roles are similar in Secrets as billing and subscriptions are handled outside of Secrets.

![](/posts/post-65.png#image-center)

In the `Collections` tab, you can choose to give fine-grain authorization to this member or just select `Grant access to all current and future collections` if this is a member you trust, then click Save.

![](/posts/post-62.png#image-center)

![](/posts/post-63.png#image-center)

Back on the `Members` tab of your Organization page, you will see that the member you invited has an `invited` tag next to their name.

![](/posts/post-66.png#image-center)

Then, the member you just invited will receive an email from `hi@ayamsecure.com` with the subject of Join "your organization name". They should click the `Join Organization Now` button in the email and then in the page that opens up in the browser, they should click `Log in` (since they should already have a Secrets account setup).

![](/posts/post-67.png#image-center)

After they have logged in, you as the organization owner need to confirm their membership. From the `Members` tab of your Organization page, click on the 3 dots menu icon next to the invited member and select `Confirm`.

![](/posts/post-68.png#image-center)

The `Confirm User` modal pops up asking you to verify the member's security `fingerprint phrase`.

![](/posts/post-69.png#image-center)

Ask the invited member to login to their Web Vault and then click on their profile on the top right of the menu bar and then select `Account settings`.

![](/posts/post-71.png#image-center)

On the right side of the `My account` page is the member's security `fingerprint phrase`. Confirm that the phrase shown here matches the phrase shown in the owner's `Confirm User` modal and then click on Confirm.

![](/posts/post-72.png#image-center)

Now, finally, the invited member is a confirmed member of your organization.

![](/posts/post-73.png#image-center)

They can now access all the vault items that have been shared to your organization's vault.

![](/posts/post-74.png#image-center)

### Step 7: Viewing vault items in the Browser Extension Apps

On a day-to-day basis, you will most likely be interacting with your Secrets vault items with the Browser Extension Apps. <a href="https://ayamsecure.com/posts/2022-11-how-to-use-secrets/#step-3-download-and-install-the-bitwarden-browser-extension-apps" target="_blank">Read this article on how to setup the Browser Extension Apps</a>.

Open the Bitwarden browser extension app and confirm that you can see your organization's collection from the `Vault` tab.

![](/posts/post-54.png#image-center)

Select the collection to view the vault items in that collection.

![](/posts/post-55.png#image-center)

From the `Vault` tab, click on `Logins` and you will see all your login vault items from all your vaults. The vault items that are in your organization vault have a boxy shared vault icon next to the vault item name.

![](/posts/post-56.png#image-center)

To move an item from your personal vault to your organization vault, click on the vault item you want to move and then scroll down and click on `Move to organization`.

![](/posts/post-57.png#image-center)

Then select the organization and the collection in your organization vault that you want to move this vault item to and click on `Move` on the upper right.

![](/posts/post-58.png#image-center)

Back on your `Logins` view, you can now see that the item you just moved to your organization vault has the boxy shared vault icon next to the vault item name.

![](/posts/post-60.png#image-center)

There you have it! You now know how to create an organization in Secrets, invite and confirm a member to your organization, and move vault items from your personal vault to your organization vault.

If you need further help setting up your organization or organizing your vault items, please don't hesitate to reach out and [contact us](/contact).


How to use Organizations in Secrets Password Manager


Dropbox is a popular cloud storage and file sharing service that allows you to store and share files online. However, if you're looking for an open-source alternative that offers more privacy and control over your data, Nextcloud is a great option. In this blog post, we'll guide you through the process of migrating from Dropbox to Nextcloud.

Step 1: Set up Nextcloud

The first step is to set up Nextcloud on your server or hosting platform. Nextcloud can be installed on a variety of platforms, including Linux, Windows, and macOS. You can also use a cloud hosting provider that offers Nextcloud as a pre-installed option. Follow the installation instructions provided by Nextcloud or your hosting provider.

Step 2: Export your Dropbox data

Before migrating to Nextcloud, you need to export your data from Dropbox. To do this, log in to your Dropbox account and go to the "Settings" page. Click on the "Export" button and select the files and folders you want to export. Choose the format for your exported files and click on the "Export" button.

Step 3: Import your data to Nextcloud

Once you have exported your data from Dropbox, you can import it to Nextcloud. To do this, log in to your Nextcloud account and click on the "Files" app. Then, click on the "Upload" button and select the files and folders you want to import. You can also drag and drop files directly into the web interface.

Step 4: Set up syncing

Nextcloud offers a desktop syncing client that allows you to automatically sync files between your computer and Nextcloud. To set up syncing, download and install the Nextcloud client for your operating system. Then, log in to your Nextcloud account and select the folders you want to sync.

Step 5: Share files and collaborate

Now that you have migrated to Nextcloud, you can start sharing files and collaborating with others. Nextcloud offers a variety of collaboration features, including document editing, calendaring, and chat. To share a file, select the file you want to share and click on the "Share" button. Enter the email address of the person you want to share the file with and customize the sharing settings as needed.

In conclusion, migrating from Dropbox to Nextcloud is a straightforward process that allows you to switch to an open-source and more privacy-focused cloud storage and file sharing service. By following the above guide, you can learn how to migrate your data and start using Nextcloud to its full potential.


How to migrate from Dropbox to Ayam Secure Box


1Password is a popular password manager that has been around for many years. However, in recent years, many users have started to switch to other password managers, including Ayam Secure Secrets (powered by Bitwarden). If you are considering making the switch from 1Password to Secrets, here is a guide on how to migrate your data:

### Step 1: Create an Ayam Secure Secrets account

Before you can start migrating your data from 1Password to Secrets, you need to create a Secrets account. Vist the [Secrets service page](/services/secrets) and pick a subscription plan. After you checkout, follow the steps on the [how to get started with Secrets page](/secrets-get-started) to create your account.

### Step 2: Export your data from 1Password

Next, you need to export your data from 1Password. This can be done only via the 1Password desktop apps on MacOS or Windows.

Open the 1Password desktop app and click on "File" in the top menu and select "Export". Choose the vault you want to export (if you have multiple vaults, you will have to repeat this import process for each vault).

![](/posts/post-29.png#image-center)

Enter your master password, choose the `1PUX` file format and click Export Data to download the file. Save it on your desktop in a place you'll be able to find it for the next step (most likely your Desktop or Downloads folder).

![](/posts/post-30.png#image-center)

### Step 3: Import your data into Secrets

Once you have exported your data from 1Password, you can import it into Secrets. To do this, log in to the Secrets Web Vault in your browser (<a href="https://secrets.ayamsecure.com" target="_blank">secrets.ayamsecure.com</a>) and click on `Tools` in the top left-hand menu. Then, select `Import data` and choose the `1Password (1pux)` file format for your import. Follow the prompts to import your data into Secrets.

![](/posts/post-31.png#image-center)

### Step 4: Check your imported data

After importing your data into Secrets, it's a good idea to check that everything has been imported correctly. Take some time to go through your passwords and other data to ensure that everything is in order. If you notice any errors with your imported credentials, you can fix them manually by editing that specific credential.

### Step 5: Delete your data from 1Password

Once you have successfully migrated your data to Secrets, you should delete your data from 1Password. This is an important step to ensure that your data is not compromised. To do this, follow the <a href="https://support.1password.com/archive-delete-items" target="_blank">instructions from 1Password</a> on how to delete items. open 1Password and select the vault you want to delete.

In conclusion, migrating from 1Password to Secrets is a straightforward process that can be completed in just a few steps. By following the above guide, you can ensure that your data is securely transferred to your new password manager. Secrets offers a robust set of features and is a popular choice among users who are looking for a reliable and user-friendly password manager.

Next, you can read this [guide on how to use Secrets](/posts/2022-11-how-to-use-secrets/) to its full potential and keep your sensitive data safe and secure.


How to migrate from 1Password to Ayam Secure Secrets?


In today's digital age, data privacy has become a major concern for individuals, businesses, and governments alike. With the vast amount of personal information we share online, it has become increasingly important to understand why data privacy matters and how it impacts us on a personal level.

## Here are some reasons why you should care about your data privacy:

1. Protects Your Personal Information

   Your personal information is valuable, and it is your right to keep it private. This includes sensitive data such as your name, address, social security number, and financial information. If this information falls into the wrong hands, it can be used for identity theft, fraud, or other malicious purposes.

2. Maintains Your Reputation

   Your online reputation is essential, whether you're an individual or a business. If your personal information is leaked or compromised, it can negatively impact your reputation. For businesses, this can lead to a loss of customer trust and can damage the brand's image.

3. Prevents Cybercrime

   Cybercrime is a growing concern, with hackers and cybercriminals constantly finding new ways to exploit vulnerabilities in technology. By taking data privacy seriously, you can help prevent cybercrime from occurring. This not only protects you but also helps to make the internet a safer place for everyone.

4. Protects Your Financial Information

   Your financial information is among the most sensitive data that you have, and it's important to keep it private. This includes bank account numbers, credit card details, and other financial information. If this information is stolen, it can lead to financial loss and damage your credit score.

5. Ensures Your Personal Safety

   In some cases, your personal safety may depend on keeping your data private. For example, if you are a victim of domestic violence or stalking, your location data can be used to track you. It's essential to keep your data private to protect your safety in such situations.

6. Maintains Your Legal Rights

   Data privacy laws protect your right to privacy, and it's important to understand and exercise those rights. By keeping your data private, you can ensure that your legal rights are protected and that you're not inadvertently waiving them.

## Conclusion

Data privacy is an essential aspect of our digital lives, and it's important to understand why it matters. It protects your personal information, maintains your reputation, prevents cybercrime, protects your financial information, ensures your personal safety, and maintains your legal rights. By taking data privacy seriously, you can enjoy a safer and more secure online experience, and protect yourself from the negative consequences of data breaches and cybercrime.


Why should you care about your data privacy?

Here are some reasons why you should care about your data privacy:

Conclusion

Read next

How to set up Two-Step Login on Google and other websites

How to use Organizations in Secrets Password Manager

How to migrate from Dropbox to Ayam Secure Box

How to migrate from 1Password to Ayam Secure Secrets?