Skip to main content

Setting up multi-factor authentication (MFA)

How to add a second layer of security to your HosPortal login using an SMS code or an authenticator app.

What is multi-factor authentication?

Multi-factor authentication (MFA) adds a second layer of security to your HosPortal login. After entering your password, you confirm your identity with a one-time code, so your account stays protected even if your password is compromised.

You can receive this code two ways:

  • SMS — a text message sent to your mobile phone.

  • Authenticator app — a free app such as Google Authenticator, Microsoft Authenticator, or Authy that generates a rotating code on your device.

An authenticator app is the more secure option and works even when you have no mobile signal.

Before you start

  • If your site administrator has enabled MFA for the whole site, it is already on and you cannot turn it off.

  • To use the authenticator option, install an authenticator app on your phone first (Google Authenticator, Microsoft Authenticator, or Authy are all free).

Enable MFA with an authenticator app

  1. Go to Account Settings.

  2. In the Multi-factor authentication section, turn MFA on and choose Authenticator app.

  3. A QR code will appear on screen.

[SCREENSHOT: QR code shown on the MFA setup screen]

  1. Open your authenticator app and choose to add a new account, then scan the QR code. If you can't scan it, enter the setup key shown beneath the code manually.

  2. Your app will display a 6-digit code that refreshes every 30 seconds. Enter the current code into HosPortal to confirm the link.

  3. Click Save. MFA is now active.

Enable MFA with SMS

  1. Go to Account Settings.

  2. In the Multi-factor authentication section, turn MFA on and choose SMS.

  3. Confirm your mobile number. HosPortal will send a one-time code by text.

  4. Enter the code and click Save.

Logging in with MFA

Next time you log in, enter your username and password as usual. You'll then be prompted for your one-time code — open your authenticator app (or check your SMS) and enter the current code to finish signing in.

Troubleshooting

  • Codes aren't accepted: authenticator codes are time-based, so make sure your phone's clock is set to update automatically.

  • New phone or lost device: contact your site administrator or HosPortal support to reset MFA so you can set it up again.

  • Option is greyed out: your site administrator has made MFA mandatory for all users, so it can't be turned off.

Did this answer your question?