With Sugar 2FA you get an extra layer of protection by adding 2-factor authentication to your SugarCRM. In this case, a potential attacker needs more than just your username and password credentials. Users do not need to remember any additional information; they just need to access the authentication app installed on their mobile phones and enter a temporary 6-digit security token as the second step of the login process.