This guide will go into detail about the "require mobile authentication" setting introduced in the latest version of Uniqkey.
By default, the setting is enabled, which requires users to be logged into a Uniqkey mobile app.
Disabling this setting will store the master password in the browser extension, instead of locally on the device. While this allows seamless access, it may reduce security for the employees who use this setting.
We still recommend mobile-based authentication for high-risk or privileged accounts to ensure maximum protection.
What is it?
In short, it allows administrators to permit employees to use Uniqkey exclusively through their browser. Instead of having to open the Uniqkey mobile app to confirm logins, create new accounts etc., no mobile device is required. Everything is processed directly in the browser.
Employees can still use a Uniqkey mobile app if they prefer, this setting simply gives them the option not to.
Who can use it?
Administrators can pick and choose which users (if any) are no longer required to use a mobile app.
Administrators not required to use mobile authentication will still need to use a Uniqkey mobile app to access the Uniqkey admin portal - this is to maintain a high level of security when accessing the organization's data.
All other features can be accessed without a mobile app.
What kind of data can be accessed without the mobile app?
Data stored in Company -> My logins, My credit cards and Company -> My secure notes.
Data stored in Private.
To allow users to access groups and their data without mobile authentication, see the section below.
What about group data?
Groups and their data requires mobile authentication by default. To change this, it needs to be allowed in the groups -> [group name] -> settings -> security panel. Disabling the "require mobile authentication" setting will allow the group to be accessed by users who are only using the Uniqkey browser extension and not the mobile app.
If you can't see this option in the group settings panel, it means that "require mobile authentication" is currently enabled for the entire organization.
How to start using Uniqkey without mobile authentication
1. In the Uniqkey admin portal, go to settings -> security -> disable "require mobile authentication"
2. Decide which users are no longer required to use mobile authentication. Go to employees -> click to select the users you wish to manage -> click manage authentication requirements
Disabling the setting will allow employees to use Uniqkey exclusively through the browser extension. They will still have the option to use the mobile app if they wish.
Enabling the setting will require employees to use a Uniqkey mobile app.
Tip: You can also change this setting for individual users by clicking on their name -> settings -> disable "require mobile authentication"
3. Select which groups (if any) are allowed to be accessed without mobile authentication. Go to groups -> click the group name -> settings -> disable "require mobile authentication"