# Security Configuration

It is optional but recommended to create a separate backup user. In the next step we will connect our PBS to Proxmox VE, and for that you need a user. You could simply use the root user, but best practices dictate that a separate user is better for security reasons. Also, Add Two Factor Authentication to secure your root account.

Note: a user that has Two Factor Authentication, can't be used to connect your PBS to Proxmox VE. That is also why we created a separate backup user in the previous step.

#### Adding Backup User

1. Login to PBS
2. Under **Configuration** go to **Access Control** and click **Add**
3. In **new user** window 
    1. Give it a name
    2. Realm: Proxmox Backup authenticator
    3. Choose strong password
    4. Make sure Enabled is checked and it doesn't expire

![Screenshot from 2025-12-01 14-14-10.png](https://docs.cyberpaw.org/uploads/images/gallery/2025-12/scaled-1680-/screenshot-from-2025-12-01-14-14-10.png)

1. Now that the account has been created, we also need to give it the correct permissions.
2. Go the **Permissions** tab
3. Click **Add** and select **User Permission**

![Screenshot from 2025-12-01 14-22-21.png](https://docs.cyberpaw.org/uploads/images/gallery/2025-12/scaled-1680-/screenshot-from-2025-12-01-14-22-21.png)

1. In User Premission Window 
    1. **Path:** select datastore only
    2. **User:** choose backup user you created
    3. **Role:** Choose DatastoreAdmin
    4. **Make** sure Propagate is selected
2. Click **Add**

![image.png](https://docs.cyberpaw.org/uploads/images/gallery/2025-12/scaled-1680-/zr7image.png)

#### Enabling Two Factor Authentication

1. Go to **Access Control**
2. Select **Two Factor Authentication** and click **Add**
3. Select **TOTP** and Fill the required details using your preferred password manager

You have to do this for each user