Announcements Introducing Two-Step Verification (2FA) for the Kasa App
Announcing Two-Factor Authentication for Kasa Users
We have started to roll out two-factor authentication for our Kasa accounts. This means that, when enabled, a new device signing in with TP-Link ID will be asked to present a time sensitive verification code to protect your account from unauthorized access.
I have already created and published a new KB Article detailing how to Set up 2-Factor Authentication in the Kasa App. If you want to jump ahead and get registered, the instructions for sign up, if eligible, can be found here:
Enabling Two-Step Verification on the Kasa App
As a reminder, we are slowly rolling this feature out to our users by enabling the feature on your account in waves. The menu for Two Factory Authentication can already be found in the app, and will tell you if the feature has been enabled on your account yet.
FAQ:
Will this affect other logins where I use my TP-Link ID?
- No, our Two-Factor Authentication System is designed to only affect the Kasa Application at this point in time. If you would like to see this feature expanded to other products, let us know in the comments below. (EDIT: 2FA has been added to our Tapo App also)
Will this completely prevent unauthorized access to my account?
- Unfortunately, there is no way of completely preventing unauthorized access to your account, on any platform. This is why we must add as many layers of security to our online accounts as possible.
- The saying "It is only as strong as the weakest link in the chain" is especially true in this situation. For someone to log into your accounts, they must provide a verification code given by either a notification or email. It is important to consider how secure these platforms are and what other people have access to the information inside. For this reason, I recommend using two-factor authentication for any accounts that provide it as an option, such as your email account.
Fun Fact: You've been using a form of two-factor authentication your entire life and haven't even known it - Captchas - Those images are checking to see if you are a bot or not, and this is also a form of two-factor authentication that companies put into place to prevent automated attacks and to protect users alike.
Join the Conversation about Account Protection, and Other Layers of Security; or simply ask a question about the new feature.
I would love to hear what other forms of two-factor authentication users have used in the past; what has worked, and what has not.
Most people nowadays are used to fingerprint readers and facial recognitions features. However, the use of authenticator codes are just beginning to hit the main stream. What do you think of these Authenticator Codes? (I personally would rather use a text message than finding an app)
I think that my favorite experience with two-factor authentication has to have been when Microsoft were first releasing facial recognition features for Windows, and I wired my Xbox Kinect up to my Windows PC in order to use their facial recognition login feature. If nobody knows what hooking a Kinect up to a PC looked like it wasn't great, my friends and I called i the octopus adapter, and it looked like this but with far longer cables. Fun project, but I think It only worked MAYBE once a week. Now we have the functionality in everyone's own phones and laptops.
. 
I just got the notification for the feature last week. Keep an eye out for this screen when opening the Kasa Application:
