Atera and Auth0 bring you a comprehensive security solution that prioritizes your online safety. Additionally, you can enjoy the convenience of passkeys — a faster, more secure way to log in using biometrics (e.g., fingerprint, Face ID, or Windows Hello) instead of a password.
If you encounter any difficulties logging into your account, please don't hesitate to contact our support team for assistance. You can reach us via chat or email, and we'll be happy to help resolve any issues you may be experiencing.
Auth0 features
Auth0 enhances security with advanced protection features designed to detect threats, prevent unauthorized access, and keep your credentials safe. For more information, see Auth0's Attack Protection.
Bot Detection
Bot Detection acts as a security checkpoint for your Atera account, identifying and blocking suspicious login attempts from automated bots and scripts. In the event of a possible attack where an unusual login pattern suggests a bot might be trying to break in, you'll be prompted to complete a CAPTCHA — a quick test to confirm you're a human. Enter the characters as displayed, and then continue to log in as usual.
Breached Password Detection
Breached password detection keeps your Atera account secure by monitoring major security breaches on third-party websites. If your login credentials are detected to be part of a breach, Auth0 will step in to protect you and it will:
- Block login attempts until you change your password.
- Send you an email notifying you of the potential compromise.
Brute-force Protection
Brute-force protection shields your Atera account from malicious login attempts coming from a single IP address. If the same IP repeatedly tries and fails to log in to your account, it will:
- Send you an email notifying you of the potential compromise.
- Block the suspicious IP address from logging in.
Once the IP address is blocked, it will stay blocked until you click Unblock in the email you receive.
Note:
- If you have an email security bot mechanism in place that checks links before it gets to your inbox, then you won't receive the 'Unblock' notification. Rather, the mechanism will have already unblocked the account and you'll receive a message with a one-time-use link to log in to your account.
- We do not advise the use of NoScript browser extension when logging into Atera as it may cause unwanted behavior.
Risk Assessment
Risk Assessment strengthens your Atera account security by analyzing key login factors — such as IP address, location, and device details — to detect and prevent unauthorized access.
If a login is flagged as suspicious based on predefined conditions:
- The attempt is blocked. Risk assessment blocks the login attempt, not the user. If you encounter this message mistakenly, please return to the login page and try again, or contact your admin for assistance.
- An error message is displayed.
- All account admins receive a suspicious login attempt email alert, containing the username, IP address, and location.
Note: When you log in using a passkey, the risk assessment prompt is skipped. If you log in using your email and password, risk assessment behavior remains the same.
Enforced logout behavior
For security reasons, you’ll be automatically logged out after 24 hours of inactivity, and after 7 days regardless of activity. To prevent unexpected logout, you’ll receive notifications in app 4 hours before, 5 minutes before, and a final non-dismissible countdown 1 minute before the enforced logout.
Set up passkeys (biometric login)
Passkeys let you log in using biometric authentication (such as Face ID, fingerprint, or Windows Hello) instead of entering a password. After you log in with your email and password, you may be prompted to create a passkey for faster sign-ins going forward.
Note: Passkeys are saved and managed by your device, browser, or password manager (for example, Windows Hello, iCloud Keychain, Google Password Manager, or a security key). If you use multiple devices, consider a synced option so you can sign in across devices more easily.
To set up passkeys:
1. Log in with your email and password.
Note: If this is the first time logging in with Auth0, you may be asked to verify your identity with your 2FA code. Enter it and click Continue.
2. When prompted, click Create and use a passkey (or similar), then follow your browser/OS prompts to save the passkey (for example, Windows Hello, iCloud Keychain, Google Password Manager, or a security key).
Note: If this is your first time logging in with Auth0, you may be asked to verify your identity with a 2FA code to complete the login. Enter the code and click Continue.
After you’re logged in, when prompted, click Create and use a passkey. Then follow your browser/OS prompts to save the passkey.
That's it! On future logins, click Continue with passkey and verify with your biometric or security key.
Troubleshooting
Login or browser issues
Follow these steps to clear the local storage, session storage, and cookies:
1. Open DevTools (right-click anywhere on the Atera page and click Inspect).
2. In the top menu bar, navigate to Application (you may have to click the chevron icon to see it).
3. Navigate to Storage and double-click on Local Storage, Session Storage, and Cookies to open them.
4. Right-click any URL starting with "auth.atera" and click clear.
No passkeys available
If you click Continue with passkey and receive the error No passkeys available, it usually means you haven’t created a passkey on this device/browser, or you’re not signed in to the same Apple ID/Google account/password manager where your passkey is stored.
To resolve:
- Log in using your email and password, then create a new passkey when prompted.
- If you use a synced passkey (for example, iCloud Keychain or Google Password Manager), confirm you’re signed in to the correct account on this device.
Note: Passkeys and 2FA are separate. Resetting 2FA does not remove passkeys. If you can’t use passkey login, you can always sign in with your email and password.
Frozen splash screen
If the mobile app opens to a frozen screen, with no options available, please locate the Atera app in your mobile device's storage and clear the storage and cache.