Important Notice – Two-Factor Authentication for Logging into the OJS System

2026-11-04

Dear Users,

Please be advised that as of October 2026, two-factor authentication (2FA) has been implemented in the OJS system.

This is an additional security measure that enhances login security and protects against unauthorized access, such as in the event of a password compromise. In addition to your username and password, the system will require you to enter a one-time code generated by an app on your phone.

How do I set up two-factor authentication?

Step 1. Install the app on your phone
Download one of the apps that generate one-time codes, such as Google Authenticator.

The app is available on Google Play (Android) and the App Store (iOS).

Step 2. Log in to the OJS system
Go to the journal’s website and log in using your existing username and password.

Step 3. Pair the app with your OJS account

When you log in for the first time, the system will display the two-factor authentication setup screen.

  1. Open the installed authentication app on your phone.
  2. Scan the QR code displayed in the OJS system. If scanning is not possible, use the option to manually enter the configuration key.
  3. The app will begin generating one-time verification codes.

Step 4. Save your recovery codes!

During the initial setup, the system will generate 10 one-time recovery codes for account access.

  • Copy them and save them in a secure location, such as a password manager.
  • These codes will allow you to log in to the system if you lose access to your phone or the app.
  • Each recovery code can be used only once.

Step 5. Logging In on Subsequent Visits

From now on, the login process will consist of two steps:

  1. Enter your OJS username and password.
  2. Open the authentication app on your phone.
  3. Read the code currently displayed in the app (usually 6 digits).
  4. Enter the code in the appropriate field in the OJS system and confirm the login.

If you do not have access to the app, you can use one of your previously saved recovery codes instead of the current code.

Important!

  • Do not delete the authentication app without first ensuring you can regain access to your account.
  • Do not share your verification codes or recovery codes with anyone.
  • Keep your recovery codes in a safe place.

Additional information: Two-Factor User Authentication (TOTP) – instructions and description of how it works