Multi-Factor Authentication
Note: MFA must be turned on by app administrators before you can enable it on your account.
Multi-Factor Authentication
Multi-factor authentication (MFA or two-factor authentication) is an added layer of security that helps protect a user’s account from unknown entities that may try to access the account holder’s data or information. MFA accomplishes this layer of security by having the account-holder validate another form of identity verification by confirming that the account holder is also in possession of the phone number or email address on that account. MFA will also require anyone who tries logging into an account to confirm what code was sent to the account holder’s method of verification. This confirmation code also effectively informs users whenever someone is trying to access their account so they know that their password has been compromised.
Enabling MFA
- Navigate to Menu > Notifications & Security > Multi-factor Authentication > Turn on two-factor authentication
Once you’ve turned on MFA you’ll be asked to choose a method of configuring your two-factor authentication by choosing one of the following methods:
Authenticator App
- DISCLAIMER - Before choosing this option, make sure you have a preferred authenticator app on your phone such as Google Authenticator, Duo, or Authy. If you are unfamiliar with authenticator apps or do not want to download an authenticator app, please choose either SMS or e-mail.
- There are two ways to add your account to the authenticator app
- QR Code - scan the QR code which will automatically open your preferred authenticator app and present you with a six-character verification code to enter in the CaredFor app
- Setup key - copy the setup key below the QR code and paste that into the setup key field in the authenticator app, then copy the six-character code from the authenticator app into the the verification code field in the CaredFor app
SMS
- Select SMS and click the green “Verify Two-factor Authentication Method” button
- A six-character code will be sent to the phone number on the user’s profile
- Enter the six-character code in the verification code field
- Select E-mail and click the green “Verify Two-factor Authentication Method” button
- A six-character code will be sent to the email address on the user’s profile
- Enter the six-character code in the verification code field
Recovery Tokens
- Once MFA has successfully been enabled on your account, the app will give you a list of Recovery Tokens that you should copy and paste into a secure document or note that you can access at a later time. You will be able to use these tokens to verify your identity in case you lose access to your phone number, email address, or authenticator app.
- You will only receive these recovery tokens once, so make sure you save them immediately in a secure location.
Logging in with MFA
- After entering your email address and password on the main login page, you’ll be prompted to enter the code that was sent to your preferred method of authentication (SMS, E-mail, or authenticator app).
- Once you enter the six-character code, you’ll be successfully logged in
- If you enter the incorrect code twice in a row, you will be prompted to contact support to help access your account
Disabling MFA
- Navigate to Menu > Notifications & Security > Multi-factor Authentication > Turn off two-factor authentication