DSM 7 2FA - how to show QR code again?

[swgiles]

I've got a brand-new NAS running DSM 7.0 and I want to set up 2 Factor Authentication for the admin account. I've done this, and in the setup of 2 factor authentication, it shows a QR code that contains all of the information for the OTP. I easily set this up on my phone, works great.

My problem is that there are 3 admins in this organization, and we'll all need the same 2FA code. The only way I've found to show the QR code is to reset the 2FA, so a different QR code is shown.

Is there a way to show the SAME QR code again, without resetting it?

 

[Telos]

Export the 2FA code from your phone app.

But since each admin has their own account, they must individually set up 2FA, at which time they will be presented with their code.

 

[swgiles]

Thanks for the quick reply. Yes, that would obviously be a workaround. We had not intended for each admin to have a separate account. I'm just surprised that it's not possible to display the existing QR again out of DSM, once you're securely logged in.

 

[Telos]

I'm just surprised that it's not possible to display the existing QR again out of DSM, once you're securely logged in.

This is common across all my 2FA accounts. I manually record the alphanumeric code as well as save a copy of the QR code, but primarily, I back up all my codes from my via my OTP app, so I can access them (import) from (to) all my devices.

FWIW, it's not a good practice to share logins.

 

[swgiles]

Thanks, we'll take that approach.

 

[fredbert]

You really should use three separate accounts. The way to give an account admin rights is to add it to the Administrators group.

Then you disable the default ‘admin’ account because having this enabled is an attack vector for malware/hackers.

 

[Robocub]

I've got a brand-new NAS running DSM 7.0 and I want to set up 2 Factor Authentication for the admin account. I've done this, and in the setup of 2 factor authentication, it shows a QR code that contains all of the information for the OTP. I easily set this up on my phone, works great.

My problem is that there are 3 admins in this organization, and we'll all need the same 2FA code. The only way I've found to show the QR code is to reset the 2FA, so a different QR code is shown.

Is there a way to show the SAME QR code again, without resetting it?

I work with a group of consultants in a similar situaiton. THe way we use this is to use a password manager like 1Password and we all have access to a shared vault where we keep these 2FA one time use codes. Works perfectly.