Help Center

Multi-factor Authentication (MFA) FAQs

MFA adds an extra layer of security by requiring you to enter a one-time code after your password. The code can come from:

  • An authenticator app (Google Authenticator, Microsoft Authenticator, etc.) OR
  • Email (whichever of the two “device”s is enabled)
  • Recovery Email (In the event of lost MFA device/method)

It depends on your site’s settings.
If your site admin has enabled “MFA Required”, every user must complete MFA before accessing the site. You will be redirected to MFA setup immediately during your next login.

Only if the site does not require MFA.
If your site requires it, the option to disable MFA is disabled.

Your MFA setup is tied to your user account, not individual sites.
However, the requirement for MFA is site-specific.

Your site requires MFA for all users.Before accessing your dashboard for the first time, you must complete MFA setup.

Go to: My Account → Profile → Enable MFA
Follow the steps to scan the QR code (for authenticator apps) or select the email method if available.

You can manually enter the secret key, account name, and issuer into your authenticator app. These appear below the QR code.

Yes. During the MFA setup, you are asked to set up a secondary email as the recovery email. This recovery email is used to send the code to recover the account.

  • Authenticator codes: 30 seconds
  • Email codes: 5 minutes

You’ll see an error message and can try again.
Multiple failed attempts may temporarily lock your account.

Yes. If you cannot use your authenticator device or primary email address, you may utilise the 'Recover Account' option and trigger one-time code sent to that address.

When you set up multi-factor authentication, you also added a mandatory recovery email address. This recovery email is your backup mechanism to get into your account if you cannot access your primary email or can't access your authenticator app. This email address cannot be same as the primary email address of the account.

  1. Go to the Login page and enter your username and password as usual.
  2. When asked for your MFA authentication code, look for the "Recover Account" link.
  3. Click the link to request a recovery code. An email with recovery code will be sent to the registered recovery email address.
  4. Check your recovery email inbox for a message with a 6-digit verification code.
  5. Enter the code to verify your identity and regain access to your account.
  1. Log in normally.
  2. Go to My Account → Login Details → Manage MFA.
  3. Select Change enrolled device.
  4. Verify with an existing code.
  5. Set up MFA again with your new device.

Google Single Sign-On (SSO) users do not go through MFA. MFA applies only to users signing in with native email/password accounts.

Yes — but only if you also have a password set on your account.
If you sign in with SSO and you have a password, you may choose to turn on MFA under My Account → Login Details.

No. MFA requirements apply only to users who log in with email and password.
SSO users are not required to enroll in MFA.

You will need to set a password first:

  1. Go to My Account → Login Details
  2. Click Set Password
  3. After setting a password, the MFA option will appear

No. MFA applies only when you use your email and password to sign in.
If you log in through Google, you will bypass MFA.