![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\"){kind=icon}
<\/p><\/div>
JumpCloud Protect\u00ae is designed to operate on Android 8 and iOS 13 and higher. It may operate on older versions, but they aren’t supported by JumpCloud. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
JumpCloud Protect is a mobile app for iOS and Android that can be used for Multi-Factor Authentication (MFA) or 2-step verification. Once the app is downloaded, and the device is enrolled, the app can be used for push notifications or as an authenticator (TOTP). <\/p>\n\n\n\n
The app can be downloaded from the iOS App Store<\/a> or the Google Play Store<\/a>. After you’ve downloaded the app and successfully enrolled your device, you can authenticate using Push MFA or Verification (TOTP) Code MFA, see MFA Guide for Admins<\/a> to learn more.<\/p>\n\n\n\n
Prerequisite:<\/strong><\/p>\n\n\n\n
- \n
- Your Admin has to enable JumpCloud Protect in order for you to download it.<\/li>\n<\/ul>\n\n\n\n
Considerations:<\/strong><\/p>\n\n\n\n
- \n
- The JumpCloud Protect app supports iOS version 13 and above, Android 8.0 and above.<\/li>\n\n\n\n
- The JumpCloud Protect app may run on a tablet, but isn\u2019t optimized for tablets at this time. <\/li>\n\n\n\n
- A user can only be enrolled in JumpCloud Protect on one device.<\/li>\n\n\n\n
- Mobile Push is supported for authentication into the User Portal, SAML SSO apps, device logins, and for Password Reset. <\/li>\n\n\n\n
- JumpCloud Protect will collect certain diagnostic data for troubleshooting issues and continuous app improvements. No user info is collected. These options are toggled On<\/strong> by default, users can turn off the data collection on the app. \n
- \n
- To do this, tap More<\/strong> > Settings<\/strong> to display options for toggling off Share Diagnostic Data<\/strong>.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<\/p><\/div>Note:<\/strong> \n
This help article provides info for JumpCloud users. For Admins looking to set up the JumpCloud Protect app for their users, see JumpCloud Protect Admin Guide<\/a> to learn more.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
Workflow:<\/strong><\/p>\n\n\n\n- \n
- You’ll receive the login request on the lock screen of your device, and can approve\/deny with a long press (iOS) or by expanding the notification (Android).<\/li>\n\n\n\n
- If your Admin requires biometric authentication, the login request won’t complete without it (Face ID, fingerprint, or passcode).<\/li>\n\n\n\n
- When you approve the login request, you gain access to your resource. If you tap deny, the login request is declined, which prevents bad actors from accessing your account.<\/li>\n<\/ul>\n\n\n\n<\/p><\/div>Note:<\/strong> \n
A push notification is valid for 60 seconds before the User Portal gets timed out in which case the user needs to initiate the push notification process again. If the user responds to an expired push notification on the device, an error appears.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
You can use JumpCloud to log into the Admin Portal, User Portal, or into your Windows, Mac, or Linux devices. <\/p>\n\n\n\n
Protecting Against Push Bombing and MFA Fatigue Attacks<\/h2>\n\n\n\n
Push Bombing is a hacking method of triggering multiple 2FA attempts using push notifications until the user may accept the request accidentally. MFA fatigue is the term for when, due to the multiple 2FA requests, a user accepts the fraudulent request out of frustration.<\/p>\n\n\n\n
To protect yourself against these types of attacks:<\/p>\n\n\n\n
- \n
- Make sure you’re following a strong password policy.<\/li>\n\n\n\n
- Enable biometric authentication on your device and ask your Admin to enable it for JumpCloud Protect.<\/li>\n\n\n\n
- Verify the app and location info before approving a push request.<\/li>\n<\/ul>\n\n\n\n<\/p><\/div>Note:<\/strong> \n
JumpCloud protects against fraudulent push attempts by blocking more than one notification per resource within a 60 second timeout period (the number of maximum concurrent attempts can be changed by an Admin). You can try again after the timeout or after you’ve approved or denied the initial request.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
![\"\"](\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/protect-verify-your-identity.png\")
<\/p>\n\n\n\nSetting Up JumpCloud Protect <\/h2>\n\n\n\n
If your org is using JumpCloud Protect for their MFA, you\u2019ll need to complete the initial setup for it.<\/p>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\")
<\/p><\/div>Tip:<\/strong> \nGuide Me: JumpCloud Protect User Enrollment<\/a><\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- To do this, tap More<\/strong> > Settings<\/strong> to display options for toggling off Share Diagnostic Data<\/strong>.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n
![\"A](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/05\/Transitioning_to_JumpCloud_Protect.gif\"){kind=spacer}
<\/p>\n\n\n\n![\"jumpcloud](\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/protect-accounts-page.png\")
<\/p>\n\n\n\n