Two-factor authentication (2FA) adds a second verification step when your staff log in, on top of their password. With 2FA enabled, you can also set a login timeout, which automatically logs staff out after a period of inactivity. Together these protect the member data in your club from unauthorised access, especially on shared or unattended devices.
Important: 2FA and the login timeout apply to your staff users only. They do not affect how your members or customers log in.
Note: 2FA is an optional add-on and may not be included in your plan. To check whether it is available for your club, or to have it switched on, reply here asking to talk to a member of the Customer Success team.
Why use it
Stronger sign-in: a second verification step makes it harder for anyone to access your club account with a stolen or shared password.
Protection on shared devices: a login timeout logs staff out of an unattended reception PC, so member data is not left exposed.
Set to suit your club: you choose how long staff can stay inactive before they are logged out.
Turning on 2FA
2FA is switched on by ClubRight for your club, not from within your settings. To enable it, reply here asking to talk to a member of the Customer Success team. Once 2FA is active, your staff complete a verification step when they log in, and the login timeout setting becomes available.
Setting the login timeout
The login timeout controls how many minutes of inactivity pass before a staff user is automatically logged out. It only takes effect when 2FA is enabled for your club. To set it:
Go to the Settings menu in the top-right corner of the admin dashboard and select Club Info.
Scroll down to the Login Timeout field.
Enter the number of minutes of inactivity after which staff should be logged out. For example, enter 15 to log staff out after 15 minutes without activity.
Select Save Changes in the top-right corner to apply it.
What happens when the timeout is reached
When 2FA is enabled and a login timeout is set, staff are logged out automatically after the period of inactivity you chose. To get back in, they log in again with their credentials and complete the 2FA verification step. If no timeout is set, the default session lasts one month.
Related help articles