Setting Up MFA

Multi-factor authentication (MFA) adds a second verification step when you log in, making your account significantly more secure even if your password is compromised.

Enable MFA

1. Go to Settings > Security.
2. Click Enable MFA.
3. Open your authenticator app (e.g., Google Authenticator, Authy, 1Password).
4. Scan the QR code displayed on screen.
5. Enter the 6-digit code from your authenticator app to verify.
6. Save the recovery codes in a secure location. These are your backup if you lose access to your authenticator.
7. Click Confirm.

Log in with MFA

After enabling MFA:

1. Enter your email and password as usual.
2. Enter the 6-digit code from your authenticator app.
3. Click Verify.

Recovery codes

Recovery codes are one-time-use codes that let you log in if you lose access to your authenticator app:

• You receive 10 recovery codes when you enable MFA.
• Each code can only be used once.
• Store them securely (password manager, printed copy in a safe location).
• If you run low, generate new codes from Settings > Security.

Disable MFA

1. Go to Settings > Security.
2. Click Disable MFA.
3. Enter your password to confirm.
4. MFA is removed from your account.

Tip: Admins can require MFA for all team members in Settings > Security > Organization Policy.