Enabling MFA

Multi-factor authentication (MFA) adds an extra layer of security to your DealView account. Even if your password is compromised, MFA protects your access.

What is MFA?

MFA requires two things to log in:

1. Something you know - Your password
2. Something you have - Your phone or security key

This combination makes unauthorized access much harder.

Enabling MFA

Step 1: Access Security Settings

1. Go to Settings > Security
2. Find the Two-Factor Authentication section
3. Click Enable MFA

Step 2: Choose Your Method

Select an authentication method:

Step 3: Set Up Authenticator App

1. Install an authenticator app (Google Authenticator, Authy, 1Password)
2. Scan the QR code shown in DealView
3. Enter the 6-digit code from your app
4. Click Verify

Step 4: Save Recovery Codes

After enabling MFA:

1. DealView displays recovery codes
2. Save these codes securely
3. Each code can only be used once
4. Use if you lose your authenticator

Logging In with MFA

Once enabled:

1. Enter your email and password
2. You're prompted for MFA code
3. Open your authenticator app
4. Enter the current 6-digit code
5. Click Verify

Codes refresh every 30 seconds.

Using Recovery Codes

If you can't access your authenticator:

1. Click Use recovery code on MFA prompt
2. Enter one of your saved codes
3. Access granted
4. Each code works only once

Generate new codes after using them.

Managing MFA

Regenerating Recovery Codes

If you've used or lost codes:

1. Go to Settings > Security
2. Click Regenerate Recovery Codes
3. Save the new codes
4. Old codes are invalidated

Changing Authenticator

To switch authenticator apps:

1. Disable MFA temporarily
2. Re-enable with new app
3. Scan new QR code
4. Verify with new code

Disabling MFA

To remove MFA (not recommended):

1. Go to Settings > Security
2. Click Disable MFA
3. Enter your password to confirm
4. MFA is removed

Organizational MFA

For workspace admins:

Requiring MFA

Enforce MFA for all workspace members:

1. Go to Settings > Workspace > Security
2. Enable Require MFA
3. Set grace period for enrollment
4. Users must enable MFA to continue accessing

Monitoring Compliance

View MFA status for users:

• See who has MFA enabled
• Identify non-compliant users
• Send enrollment reminders

Troubleshooting

Codes not working?

• Check your device time is correct
• Codes are time-sensitive
• Use the latest code (they change every 30 seconds)

Locked out?

• Use a recovery code
• Contact support if no recovery codes available
• Verification may be required

Lost phone?

• Use recovery codes immediately
• Disable MFA and re-enable with new device
• Generate new recovery codes

Related Articles

• Data Security Overview
• Understanding Audit Logs
• SSO Setup