Two-factor authentication

Stolen, reused, and weak passwords remain a leading cause of security breaches, therefore NIC.LV has added an extra level of protection to its online system user accounts in the form of two-factor authentication.

Two-factor authentication methods rely on a user providing a username and password (something they know) and then instead of immediately gaining access, they are required to enter a second authentication factor, either a security token (something they have) or a biometric factor, such as a fingerprint or facial scan (something they are).

With 2FA, a compromise of just one of the authentication factors won’t unlock the account. So, even if your password is stolen or your phone is lost, the chances of someone else having your second-factor information is highly unlikely.

Several types of two-factor authentication are in use today, some may be stronger or more complex than others, but all offer better protection than passwords alone. The most popular as well as the NIC.LV selected form of two-factor authentication uses a software-generated time-based, one-time passcode (also called TOTP, or “soft-token”). The selected soft-token approach has significant benefits:

• the code is generated and displayed on the same device, therefore excludes the possibility of hacker interception;
  
• user authentication is possible just about everywhere as the app-based 2FA solution also works offline and is available for mobile, wearables, or desktop platforms.
  

How to enable and use 2FA?

Before enabling 2FA please save the secret key! If you lose or damage your 2FA device, you can use it to connect a different device.

How to disable 2FA?

If the secret key and the 2FA device are lost, you can disable 2FA by submitting a request (application form) to NIC.LV and identifying yourself by one of the following methods:

• electronically signing the application to disable 2FA and submitting it by e-mail to dns@nic.lv;
• by sending an application using your e-address in the portal latvija.lv, with recipient: Latvijas Universitātes Matemātikas un informātikas institūts, reģ.nr. 90002111761;
• presenting the application and an identity document in person at the NIC.LV customer service centre (Raina Bulvaris 29, Riga, Latvia);
• making payment for a .lv domain name via bank transfer. Payment must be made from a bank account of the domain name holder whose name is indicated in the invoice. The description field of the transfer shall state: Invoice number: PRXXXX-XXXXX, 2FA deactivation: Name Surname.