Multi-factor authentication (MFA), also called two-factor authentication (2FA), adds an extra layer of protection to your Portal account. With MFA enabled, users enter a temporary code each time they log in, which significantly improves account security. This guide walks you through enabling MFA for your Portal account, registering a device, and disabling MFA when needed.
Only users with Admin roles can enable or disable MFA, either for themselves or for other users.
Step 1: Enable MFA for Individual Users
You can enable MFA on a per-user basis:
- Log into the Portal, open the side menu, go to Settings, and select the Users tab.
- Find the user in the list. Each user's MFA status appears in the Multi-Factor Auth column.
- For any user with a Deactivated status, click the ellipsis icon at the right of their row, then click Enable MFA.
- A success notification appears and the user's status changes to Active.
Step 2: Register a Device
Once MFA is enabled, the user is prompted to register a device the next time they log in. A screen displays a QR code, which they can scan using an authenticator app such as Google Authenticator or any other compatible app.
Step 3: Disable MFA for Individual Users
You can also disable MFA on a per-user basis:
- Log into the Portal, open the side menu, go to Settings, and select the Users tab.
- For any user with an Active status, click the ellipsis icon at the right of their row, then click Disable MFA.
- A success notification appears and the user's status changes to Deactivated.
Disabling MFA for a user also removes their registered device. If you re-enable MFA for that user later, they will need to register their device again.
Conclusion
Enabling multi-factor authentication is a simple, effective way to strengthen your Portal account's security and prevent unauthorized access. By following the steps in this guide, you can enable MFA, register devices, and manage MFA settings for individual users with confidence.