Multi-Factor Authentication (MFA)

Multi-factor authentication (MFA) is one of the most effective ways to protect your SingleSign account. It adds a second verification step so that even if someone learns your password, they still can't sign in.

What is MFA?

MFA requires two factors to sign in:

1. Something you know — your password.
2. Something you have — a time-based one-time password (TOTP) generated by an authenticator app on your phone.

After you enter your password, you'll be asked to enter a 6-digit code from your authenticator app. This code changes every 30 seconds, so it can't be reused.

How to enable MFA

1. Sign in to your SingleSign account at singlesign.com.
2. Go to Account → Security → MFA.
3. Click "Enable".
4. Scan the QR code with your authenticator app.
5. Enter the 6-digit code displayed in your app to confirm setup.
6. Save your backup codes — you'll be shown a set of one-time backup codes. Store them in a safe place (like a password manager or a printed copy in a secure location). You'll need these if you ever lose your authenticator device.

Using MFA to sign in

1. Enter your email and password as usual.
2. When prompted, open your authenticator app.
3. Enter the 6-digit code currently displayed in the app.
4. You're signed in.

Supported authenticator apps

SingleSign works with any TOTP-compatible authenticator app, including:

• Google Authenticator (Android, iOS)
• Authy (Android, iOS, Desktop)
• 1Password (all platforms)
• Microsoft Authenticator (Android, iOS)
• Bitwarden (all platforms)

Lost your MFA device?

If you've lost the device with your authenticator app:

1. On the sign-in page, click "Use a backup code" instead of entering an MFA code.
2. Enter one of your backup codes. Each code can only be used once.
3. Once signed in, go to Account → Security → MFA and set up MFA again with your new device.
4. Generate a new set of backup codes after re-enabling MFA.

If you don't have any backup codes, see Recovery options for alternative ways to regain access to your account.