-->

Standard Operating Procedure for TOTP Application in APT 2.0

 Standard Operating Procedure for TOTP Application in APT 2.0

India Post 2FA Authentication App - User Manual

Version: 1.0.1

Release Date: 04/04/25

India Post Authenticator

Dev Environment

Version 1.0.1

Sign In

Please enter your employee details to continue

  • Employee ID
  • Mobile Number
  • Sign In

Table of Contents

  • 1. Introduction
  • 2. Getting Started
    • Installation
    • First-time Login
  • 3. App Features
    •  Logging In
    • OTP Verification
    • Main Dashboard
    • Adding New Accounts
    • Using Generated OTPs
    •  Deleting Accounts
  • 4. Troubleshooting
  • 5. Security Best Practices
  • 6. FAQ
  • 7. Support

1. Introduction

The India Post 2FA (Two-Factor Authentication) Authenticator app is a secure mobile application designed exclusively for India Post employees. This app generates time-based one-time passwords (TOTPs) that provide an additional layer of security when accessing India Post's internal systems and applications.

Key Benefits:

  • Enhanced security for accessing India Post systems
  • Simple and user-friendly interface
  • Works even without an internet connection once set up
  • Support for multiple employee accounts
  • Real-time countdown timers for OTP validity

2. Getting Started

Installation

The India Post 2FA Authenticator app can be installed using one of the following methods:

  • Official Distribution: Download and install the app through the official India Post IT department distribution channel.
  • Mobile Device Management (MDM): If your organization uses MDM, the app may be automatically pushed to your device.

First-time Login

When you first launch the app, you'll see the India Post splash screen. After a brief loading animation, you'll be directed to the login page.

·      3. App Features

·       Logging In

·        Launch the India Post 2FA Authenticator app.

·        On the login screen, enter your:

o   Marketing services for Post Office

o   1.Employee ID (8 digits)

o   2 .Mobile Number (10 digits)

·        Tap the "Sign In" button.

·        The environment you're accessing (Dev, Test, Training, Preprod) will be displayed on the sign-in button.

·        Note: The mobile number must match the one registered in the India Post employee database.

·       OTP Verification

·        6. The system will send a 6-digit OTP to your registered mobile number.

·        7.Enter the received OTP in the verification screen.

·        8.Tap "Verify".

·        9.If the OTP is correct, you'll be directed to the main dashboard.

·        10.Note: If you don't receive the OTP within 30 seconds, you can tap "Click here for Resending SMS" to request a new OTP.

·       Main Dashboard

·        User ID: Your employee ID

·        OTP: The current 6-digit one-time password

·        Countdown Timer: Shows the remaining time (in seconds) before the OTP refreshes

·        Environment: The current environment (Dev, Test, Training, Preprod) is displayed at the top

·        The OTPs automatically refresh every 30 seconds for security purposes.

·       Adding Account

·        From the main dashboard, tap the red 'Scan QR' button in the bottom right corner.

·        The QR code scanner will open.

·        Scan the QR code provided by the India Post system you wish to access.

·        The app will verify that the mobile number associated with the scanned QR code matches your registered mobile number.

·        If verified, the new account will be added to your dashboard, and a new OTP will be generated.

·       Using Generated OTPs

·        Open the India Post 2FA Authenticator app.

·        Note the current OTP displayed for the appropriate user ID.

·        Enter this OTP when prompted by the system you're accessing.

·        Remember that each OTP is valid for a limited time (as shown by the countdown timer).

·       Deleting Accounts

·        On the main dashboard, locate the account you wish to delete.

·        Tap the delete (logout) icon in the top right of the screen.

·        The account will be removed from your dashboard.

·      4. Troubleshooting

·       OTP Not Received

  • Ensure your mobile number is correctly entered
  • Check your mobile signal strength
  • Wait 30 seconds and use the 'Resend OTP' option

Invalid OTP Error

  • Make sure you're entering the most recent OTP received
  • Check if the OTP has expired (use the resend option if needed)
  • Ensure you're entering the complete 6-digit code

QR Code Scanning Issues

  • Ensure adequate lighting when scanning
  • Hold your phone steady
  • Make sure the QR code is fully visible in the scanner frame

Mobile Number Mismatch

  • If you receive a 'Mobile Mismatch' error when scanning a QR code, contact your system administrator, as your mobile number may need to be updated in the employee database

App Crashes

  • Ensure your app is updated to the latest version
  • Restart your device
  • If problems persist, reinstall the application

5. Security Best Practices

  • Never share your OTPs with anyone, including colleagues or IT support staff.
  • Do not take screenshots of your OTPs or QR codes.
  • Password-protect your device to prevent unauthorized access to your authenticator app.
  • Log out of systems after use, even if you've used 2FA to access them.
  • Report suspicious activity immediately to your IT security team.

6. FAQ

Q: Can I use the India Post 2FA Authenticator app on multiple devices?

  • A: Each device setup requires its own activation. Contact your system administrator if you need to use multiple devices.
  • Q: What happens if I lose my phone?

A: Contact your system administrator immediately to deactivate your current 2FA setup and provision a new one.

  • Q: Does the app work without an internet connection?
  • A: Yes, once set up, the OTP generation works offline. However, initial setup and account verification require internet connectivity.
  • Q: Can I use the app for personal accounts outside of India Post?
  • A: No, the India Post 2FA Authenticator is designed exclusively for India Post systems.
  • Q: How secure are the generated OTPs?

A: The app uses industry-standard TOTP algorithms. Each OTP is valid for only 30 seconds, making unauthorized access extremely difficult.

7. Support

This user manual is confidential and intended for India Post employees only. Unauthorized distribution is prohibited

Version 1.0 | Last Updated: 01.04.2025