{"id":434,"date":"2015-11-09T15:05:05","date_gmt":"2015-11-09T15:05:05","guid":{"rendered":"http:\/\/fusion360.wpengine.com\/passwords-are-great-but-what-else-can-i-do-to-secure-my-account\/"},"modified":"2016-03-15T10:16:13","modified_gmt":"2016-03-15T10:16:13","slug":"passwords-are-great-but-what-else-can-i-do-to-secure-my-account","status":"publish","type":"post","link":"https:\/\/www.autodesk.com\/products\/fusion-360\/blog\/passwords-are-great-but-what-else-can-i-do-to-secure-my-account\/","title":{"rendered":"Passwords are great, but what else can I do to secure my account?"},"content":{"rendered":"

As we have gone about building Fusion 360 as a cloud based product development platform, we have had our share of people asking questions about security practices and the safety of their data in the cloud. It used to take a lot of one on one conversations in the early days (1.5-2 years ago) to communicate our cloud security best practices to build customer confidence to really use a cloud based solution for their product development needs. Our Trust Center<\/A>, as well as our Security whitepaper<\/A> does<\/SPAN> a good job of explaining our security practices for data.<\/P>

 <\/P>

Security is not just a one way street though. As secure as we make our back end, there are things that you can do to make sure things stay secure. This includes using a strong and unique password for your A360 account and not sharing your password with others. So what exactly makes a strong password? Really at this point, the longer the better and a combination of words that don\u2019t usually appear together makes it really hard to brute force it. I think this XKCD strip illustrates the point well.<\/P>

 <\/P>

\"Security1.png\"<\/P>

 <\/P>

Image courtesy of xkcd.com<\/P>

 <\/P>

After picking a strong password, what else can you do to secure your account? Well, the next step is to use two factor authentication where you have to use a second set of credentials from a separate channel to verify your identity. The most common implementation for this is to use your cell phone as the second factor to get a code sent to you via an App or text message to you so that you are entering your password and a code that only you can have. This way even if your password is compromised, an attacker still can\u2019t get in to your account without have physical access to your phone as well.<\/P>

 <\/P>

So how do I go about enabling two factor authentication for my account?<\/P>

 <\/P>