SearchX eSigningEnvelope Authentication
Add password protection or SMS two-factor authentication so only the intended recipient can access an envelope.
Envelope authentication adds an extra layer of security to your envelopes by requiring recipients to verify their identity before they can access the documents. SearchX eSigning supports two authentication methods: password protection and two-factor authentication (2FA) via SMS. These options are configured per recipient when creating an envelope, and can be modified after the envelope has been sent.
Choosing between password and 2FA
Two-factor authentication via SMS is the preferred and most secure option. It requires no separate communication from the sender, and a unique code is generated each time access is requested. This is stronger than a fixed password that may already be known or have been shared.
Password protection is generally the better fit where:
- The sender prefers not to incur an SMS authentication fee.
- A mobile number is not available for the recipient.
- The recipient is located in a country where external SMS delivery may not be supported or reliable, including certain countries in the Middle East, South Africa and other regions.
Where a password is used, it is the sender's responsibility to communicate it to the recipient. While the password can technically be included in the envelope message, this is not recommended, as it reduces the effectiveness of the additional security layer.
Requiring a password
Password authentication requires the recipient to enter a password before they can view the envelope. This is useful when you need to ensure that only the intended person can access sensitive documents.
To enable password authentication:
When adding recipients to your envelope, click Options next to the recipient and select Require password.
You will need to share the password with the recipient separately (for example, by phone or in a separate message) so they can access the envelope. Avoid including it in the envelope message itself. When the recipient opens the envelope, they will be prompted to enter the password before they can view the documents.
Requiring two-factor authentication (2FA)
Two-factor authentication requires the recipient to enter a one-time code sent to their mobile number via SMS before they can access the envelope. This provides a stronger level of security as it verifies that the recipient has access to their registered phone.
To enable two-factor authentication:
When adding recipients to your envelope, click Options next to the recipient and select Require two-factor.
Enter the recipient's mobile number where the authentication code will be sent and click Confirm.
When the recipient opens the envelope, they will be prompted to request an SMS code and enter it before they can view the documents.
Please note that SMS messages sent through SearchX eSigning are billed in accordance with the subscriber agreement. When two-factor authentication is enabled for a recipient, the option to send the envelope via SMS will not be available for that recipient.
Changing authentication after sending
If you need to modify or remove authentication on an in-progress envelope, you can do so from the envelope detail view.
Scroll to the Envelope recipients section and click Actions next to the recipient.
Make your changes to add, remove, or update the password or two-factor authentication settings.