Note: Only admin users with access to Account Settings can enable this setting.
Multi-Factor Authentication (MFA) provides a method to verify a user's identity by requiring them to provide more than one piece of identifying information, such as a code sent to your phone or email or using an authenticator app. This ensures that only valid users can access their accounts even if they use a username and password that may have been compromised from a different application.
How to Enable MFA
After logging in to VerticalChange, click on the Account button in the lefthand navigation menu.
Then click on the Settings tab. In the checkbox list of settings, click on Enable Multi-Factor Authentication.
Then click Save.
How to Log In with MFA Enabled
If you enable MFA for your agency, you and all the users in your agency will be asked to verify their identity each time you login. (Don't worry - you can set the prompt to come back in 30 days).
When logging in, enter in your email address and password. Then click Log In.
You will be taken to the page to Secure Your Account.
During your first log-in to the system, you will be asked to scan a QR code using your preferred authenticator application and then enter the provided one-time code in the box and then click Continue.
Alternatively, you can also click on Try another method to set up Multi-Factor Authentication using text messaging.
When you click on Try another method, select "SMS" instead of "Google Authenticator or similar app". You will then be prompted to enter your phone number and continue.
At this point, you will receive an text message with a temporary, one-time code. Enter in your code and then click Continue.
Note: Depending on your cellphone plan, your carrier may charge you standard message rates and data charges to receive the text message.
After you have successfully entered in your temporary code, you will be given a recovery code. Make sure to keep this code somewhere safe - if you lose access to your phone or have troubles getting an access code through one of your devices, you can always enter in this code to access your account!
Once you have confirmed your account the first time, any time you log in after, you will automatically be sent a text message to the phone number you provided the first time.
You can also select "Try another method" when logging in to have a code sent to your email address, or use the Recovery Code you saved.
If you don't want to get prompted every time you log in, click Remember this device for 30 days, and you won't have to enter in a code for 30 days.
If you have any questions, please reach out to us at support@verticalchange.com.