has been using Black Synology for more than a year. In order to remotely access NAS at home, I applied for dynamic public IP to Telecom, resulting in the NAS being directly exposed to the public network, and the security risks are increasing exponentially. It seems difficult to protect data security by simply setting complex passwords, so it is necessary to change NAS to a two-step verification login method.
principle: Use Google authentication device (Google Authenticator) to bind Synology account to achieve verification code login
DSM version: DSM 6.1.7
1. Enter Synology's "Control Panel" and "User Account"
2. Click "Advanced Settings" and check "Force the following users for two-step verification".
Select "All Users"
3. Now enter the "2-step verification setup wizard" and click Next.
4. Entering the installation and configuration step, you need to use Android or Apple mobile phone to download Google Authenticator. You can search directly in the electronic market, download it to your phone and install it.
5. After the mobile phone has installed the verifier, you can use scanning code or manually input to set it.
6. I used manual configuration and click "Manually enter configuration" to input the "account" and "key" provided by NAS into the mobile phone verifier.
7. After completing the binding, you need to enter a 6-digit verification code.
8. Enter the email address and reset it when the mobile authentication device deletes or loses it.
9. Click Next, and the two-step verification settings are completed. After logging out, log in again. After entering the login account and password, you also need to enter a 6-digit verification code to complete the system login.
This way, it is more troublesome to enter a 6-digit verification code every time you log in. We can select "Remember device" when logging in, so don't enter the verification code again when logging in next time.
You can modify trusted devices in "Personal Settings", "Account", and "2-step verification".
Two-step verification login is a recognized low-cost and high-strength account protection technology. Many websites or software with higher security levels use this method to log in, which can prevent security incidents from occurring to a certain extent. Of course, we also need to have security awareness, such as setting up complex passwords, changing passwords regularly, paying attention to the security of binding emails, etc. For NAS novices, one more barrier is better than "running naked" on the public network, so it is recommended that you enable 2-step verification to log in to NAS as soon as possible.
