This article explains how to set up app-based MFA in Factorial.
For a full explanation of what MFA is, how it works, available authentication methods (including email MFA), enforcement rules, and common scenarios, see Multifactor Authentication – MFA.
This article should be read as a technical setup guide, not as a complete overview of MFA.
Overview
App-based Multifactor Authentication (MFA) adds an extra layer of security to your Factorial account by requiring a time-based verification code generated by an authentication app.
This article covers:
- Who can set up app-based MFA
- Supported authenticator apps
- How to enable app-based MFA step by step
- What happens after setup
Who can set up app-based MFA
You can set up app-based MFA only if you log in using an email and password.
The following users cannot configure app-based MFA:
- Users who sign in using Single Sign-On (SSO)
- Users whose access is managed entirely by an external identity provider
Admins may enforce MFA at company level. In that case, users will be required to complete MFA during login even if they did not manually enable it themselves. Enforcement rules are explained in the main MFA article.
Supported authenticator apps
You can use any standard Time-based One-Time Password (TOTP) authenticator app, including:
- Google Authenticator
- Authy
- Microsoft Authenticator
- 1Password
- Any other TOTP-compatible app
Factorial does not recommend or require a specific app.
How to set up multi-factor authentication
- Log in to Factorial using your email and password
- Click your profile picture in the top-right corner
- Go to Profile settings
- Open the Security section
-
Under Multifactor Authentication, click Set up app-based MFA
3. Install the Google Authenticator app on your mobile phone. Links to Android and iOS
4. Scan the QR code with the app and enter the verification code that it generates into Factorial
Once completed, app-based MFA will be enabled for your account.
What happens after setup
At each login, after entering your email and password, you will be asked for a verification code from your authenticator app.
If app-based MFA is unavailable (for example, you cannot access your authenticator app), email-based MFA may be offered as a fallback, depending on your company’s security settings.
Details about fallback methods and recovery options are explained in the main MFA article.