MFA is available for free on all accounts. Only an account owner can enable MFA on an account, and users should speak to their account owner to activate MFA.

Multi-factor Authentication (MFA) is an additional security layer for user accounts to help prevent unauthorised account access, if a system password has been compromised. With MFA, users are required to provide two or more forms of authentication to access their accounts, such as their password and a one-time code: sent to the user via email, SMS, or an authenticator app.

MFA is not enabled by default on a user's account and requires the account owner to first enable MFA at the account level for all the users on the account. Once MFA is enabled at the account level, all users on the account will be required to configure MFA the next time they login.

Once MFA is enabled and configured, users on your account will be asked to complete multiple steps every time they login to their account.

How to enable MFA?

1. Login to your account.

2. Click on your profile drop down and click the Account Settings link

3. Scroll down to the Login settings to toggle the Multi-Factor Authentication switch ON. Only account owners have access to enable/disable this setting for all the account users.

4. Log out of your account (very important step) for the MFA settings to start reflecting for the account.

What happens after you enable MFA?

1. When you login for the first time after MFA has been enabled, you will be prompted to choose your preferred MFA method.

2. After selecting your preferred mode, enter the one-time code and click on Continue.

3. Copy the recovery code and keep it safe somewhere. This code will be handy when you want to login to the app but don't have access to your device to receive the one-time MFA codes. This code will only be available for the first time login after enabling MFA.

4. Click on Continue. You are all set to access your account.

5. For every subsequent login, you can choose from the below options:

• Option chosen in Step 1
• Email
• Recovery code

How to disable MFA?

1. Login to your account

2. Go to the Login Settings to toggle the MFA switch OFF. Only account owners have access to enable/disable this setting for all the account users.

3. Log out of your account (very important step) for the MFA settings to start reflecting for the account.

Key things to remember:

• Log out of your account after changing MFA toggle.

• Only account owners can enable/disable this setting for the account users.

• Please reach out to Support if you want to change the MFA login preference (App/SMS) in future.

• This feature is currently optional, but we strongly recommend enabling this to secure your accounts from cyber threats.