What is multi-factor authentication?
Multi-factor authentication (MFA)—sometimes called two-factor authentication (2FA)—adds an extra layer of security to your account. When MFA is enabled, users must verify their identity with a second method, such as an authenticator app or SMS.
If someone attempts to access your account, they would need both your password and your mobile device. We recommend enabling MFA for your own account and encouraging your users to do the same.
Enable MFA for my user profile
- Click on your name at the top right
- Select Profile
- Open the 'Security' tab
- Switch on the Multi-factor authentication toggle
- Follow the prompts using a time-based authenticator app, such as Google Authenticator
Print your recovery codes and store them safely—if you lose your device, your recovery codes allow you to regain access.
Require MFA for a user role
You can make MFA mandatory for users with a specific role.
- In the Manage workspace, go to Settings > Users > Roles
- Select the role
- Tick Require multi-factor authentication
- Click Save
Users assigned this role will be prompted to configure MFA when they next sign in.
Troubleshooting MFA
Users may experience issues such as:
- Lost recovery codes
- Clock mismatch affecting the code
- Problems with their authenticator app
- SMS delays or network issues
Help articles from common providers:
If issues persist, please contact Good Grants support.
Reset MFA for a user
MFA can be reset for users associated a single Good Grants or Award Force program. Users associated with multiple will need to contact Good Grants support for assistance.
- In the Manage workspace, go to Users
- Click the user's name
- Choose Reset multi-factor authentication
- Read the pop-up and click Confirm
Once reset, the user will need to re-enable MFA for their profile.
Good to know
- MFA can be enabled by any user for their own profile.
- Only account owners or managers with the correct permissions can require MFA for a role.
- Recovery codes are essential—without them, users may lose access if their device is lost or replaced.
- Reputable authentication providers are free. Use caution when downloading authentication apps that ask for subscription fees.