Now Live: Two-Factor Authentication (2FA)

Available for Classic and Next-Gen Knack Apps

We’re excited to announce that Two-Factor Authentication (2FA) is now live and available on all Pro plans and higher, for both Classic Knack apps and our new Next-Gen apps!

This release brings a powerful, yet easy-to-use security upgrade to your applications, ensuring that only verified users can access your most sensitive data.

Available now in both Classic and Next-Gen Knack and included with all Pro plans and above

Why 2FA Matters: It’s No Longer Optional

2FA isn’t just for big enterprises anymore. Whether you’re a solo builder, an agency, or an SMB handling sensitive client or internal data, 2FA is quickly becoming an expectation, not a nice-to-have.

Many Knack customers are required to implement 2FA due to:

• Internal security policies
  
• Client contracts and agency standards
  
• Compliance frameworks like HIPAA, SOC 2, or GDPR
  

In today’s threat landscape, passwords alone are often no longer enough. Two-Factor Authentication protects your app and your reputation by adding an extra layer of verification.

What is 2FA?

2FA is a secure login method that requires users to authenticate with:

1. Something they know such as their password
   
2. Something they have such as a time-based code from an authenticator app like Google Authenticator, Authy, or Microsoft Authenticator
   

Even if a password is compromised, no one can access your app without the second factor.

Once enabled, all users logging into protected pages will be required to set up 2FA by default. You can optionally disable it for specific users or service accounts.

Toggle on 2FA for All Users in Settings

Managing 2FA for Individual Users

Need to disable 2FA for specific users? Follow these steps:

1. Navigate to All Accounts in your Builder
   
2. Select the individual user record
   
3. Click the ellipsis (…)
   
4. Choose Disable Two-Factor Authentication
   
5. Save changes
   

You can also toggle the 2FA field directly from “Yes” to “No” if needed.

Enable individual users in the account at a finer grain

This is useful for service accounts, internal support, or users who’ve temporarily lost access.

What End Users Will Experience

When 2FA is enabled, users will:

1. Enter their email and password
   
2. Be prompted to download an authenticator app
   
3. Scan a QR code with their phone
   
4. Enter the time-based code shown in their app
   
5. Successfully log in and complete setup
   

From then on, they’ll be asked for a new code every time they log in.

Setup an authenticator app to trigger a second factor of authentication.

We recommend adding a brief in-app guide or link to a support article to help users set up 2FA with ease.

Troubleshooting Tips

If a user loses access to their device or app:

1. Disable 2FA for that user in the Builder
   
2. Save changes
   
3. Re-enable 2FA to reset setup on next login
   

This allows the user to scan a new QR code and securely log in again.

Upgrade your Knack plan today to Pro or above to take you apps and data to a new level of security!