Setting up two-factor authentication (MFA)

Spexsure supports time-based one-time password (TOTP) MFA, compatible with Google Authenticator, Authy, 1Password, Bitwarden, and Microsoft Authenticator. MFA adds a second layer of protection beyond your identity provider's login.

Grace period

When you first sign up, you have a 15-day grace period before MFA becomes mandatory. A banner in the navigation counts down the remaining days. After the grace period expires, you are redirected to the MFA setup page on every login until you complete enrollment.

Enabling MFA

1. Go to Settings → Security.
2. Click Set up two-factor authentication.
3. Open your authenticator app and scan the QR code shown, or enter the secret key manually.
4. Enter the 6-digit code from your authenticator app to confirm the setup.
5. Save your backup codes in a secure location — you will need them if you lose your authenticator.
6. Click Enable — MFA is now active on your account.