What is covered?
- What is Multi-Factor Authentication (MFA)?
- How to enable Two-Factor Authentication: SMS & Email?
- How to enable Two-Factor Authentication: Authenticator App?
- How to enable Two-Factor Authentication for your team?
- How to disable Two-Factor Authentication?
- How to log in using a Google Account?
- Frequently Asked Questions
What is Multi-Factor Authentication (MFA)?
MFA is a security enhancement that requires users to present two pieces of evidence when logging in to their accounts. This feature protects against unauthorized access by ensuring that the person trying to access an account has to verify their identity in more than one way.
How to enable Two-Factor Authentication: SMS & Email?
Navigate to My Profile > Security | |
Add your email > verify your email | |
Add your phone number > verify your phone number |
How to enable Two-Factor Authentication: Authenticator App?
Navigate to My Profile > Security | |
Scan the QR code using any authenticator app like Google Authenticator, Duo Mobile, or Authy. | |
Enter the confirmation code. |
How to enable Two-Factor Authentication for your team?
Remember: This option is only available to users with the role of Decision Maker or Advisor |
Navigate to My Profile > Security | |
Enable 2-Factor Authentication (My Company) |
All users in your company's account will be prompted to set up Multi-Factor Authentication on their next login attempt.
How to disable Two-Factor Authentication?
Navigate to My Profile > Security | |
Locate the "Disable 2FA" option. | |
Enter your password and click "Continue" |
Remember: Turning off MFA will make your account less secure, and doing so is only advised in specific situations. |
Note: If you lose access to your phone or email, contact our customer support immediately to help secure your account and update your MFA settings. |
Note: If your decision-maker requires multi-factor authentication, you will not have the option to disable it. |
How to log in using a Google Account?
If you're using a Google email with your PF Expert account, we made it easier for you to log in to PF Expert.
With Google Authentication, you can sign in easily to PF Expert without typing your PF Expert password.
On the login page, click on Log In Using Google Account | |
Sign in with your Google account |
Frequently Asked Questions
MFA is a security enhancement that requires users to present two pieces of evidence when logging in to their accounts. This feature protects against unauthorized access by ensuring that the person trying to access an account has to verify their identity in more than one way.
We are introducing MFA to improve security and protect user data from unauthorized access. This enhancement addresses vulnerabilities associated with relying solely on passwords, which can be compromised through phishing or other techniques.
Once MFA is enabled, you will need to provide your password (something you know) and a second factor, usually a verification code sent via SMS, email, or generated through an authenticator app (something you have), to access your account.
You can choose between receiving a one-time passcode via SMS or email, or generating a code through an authenticator app installed on your smartphone.
In order to set up 2FA, a one time banner is added to the PF dashboard with “Setup” option. Alternatively, you can navigate directly to the newly added "Security" screen, which allows you to set up MFA on PF Expert. After that, you may select how you would like to get the second factor and activate MFA by following the instructions.
In order to change the 2FA technique, you must first disable the existing setup in the mode you have chosen using the “Disable 2FA” option and then set it up again for a different mode.
You can use the “Try again” option to send your MFA code again after 30 seconds if you haven't received it via email or SMS. If using an authenticator app, ensure the app is correctly configured and synchronized.
You will be prompted to input the MFA code delivered to your selected method on a new screen after providing your login information (password and username). To access your account, enter the code received on your preferred method.
If you lose access to your phone or email, contact our customer support immediately to help secure your account and update your MFA settings.
While MFA adds an additional step to your login process, it is a minor delay that significantly increases the security of your account. The extra time taken to enter a verification code is a worthwhile investment in protecting your data.
Given the enhanced security benefits, MFA is highly recommended for all users but will not be mandatory at this point in time.
Locate the "Disable 2FA" option on the "Security" Screen of the user menu in order to disable MFA. Remember that turning off MFA will make your account less secure, and doing so is only advised in specific situations.
If you have 2FA set up on your authenticator app and are unable to use it, you can use recovery codes to log in to Expert. Every code may only be used once.