Security & MFA¶
Protect your account with Two-Factor Authentication (2FA / MFA).
What is MFA?¶
Multi-Factor Authentication adds a second layer of security to your login. After entering your password, you are prompted for a one-time code that changes every 30 seconds. Even if someone obtains your password, they cannot log in without your device.
Enabling MFA¶
- Go to Settings → Security (or System → MFA)
- Click Enable Two-Factor Authentication
- Open an authenticator app on your phone:
- Google Authenticator
- Authy
- Microsoft Authenticator
- Scan the QR code shown on screen
- Enter the 6-digit code from the app to confirm
- Click Activate
MFA is now active on your account.
Logging in with MFA¶
- Enter your email and password as usual
- On the next screen, enter the 6-digit code from your authenticator app
- Click Verify
The code refreshes every 30 seconds — if it expires before you submit, just use the new one.
Disabling MFA¶
- Go to Settings → Security
- Click Disable MFA
- Enter your current password to confirm
Warning
Disabling MFA reduces your account security. Only do this if you no longer have access to your authenticator device and you are setting up a new one.
Lost access to your authenticator¶
If you lose your phone or can't access your authenticator app, contact your administrator. They can reset your MFA from the Admin Panel so you can log in and set it up again.
MFA for your team¶
Admins can see which users have MFA enabled in Settings → User Management (shield icon next to the user). MFA is always optional per user — it cannot currently be enforced platform-wide from user settings.