Multi-factor authentication for Email

Enabling for users

1. Go to Settings
   From the left menu, click Settings.
2. Open the General Tab
   In the Settings screen, make sure you’re on the General tab
3. Find the Security Section
   Scroll down to the Security section where “Multi-Factor Authentication” appears
4. Enable MFA
   Toggle the Multi-Factor Authentication switch from OFF → ON

User Experience After Enabling

1. They enter email and password
2. They are prompted to set up MFA
3. They scan a QR code with their authenticator app
4. They enter the code shown in the app to complete setup

FAQs

Q: Does MFA affect SSO users?

A: No. Users who log in via SSO are not prompted for MFA.

Q: What if a user loses access to their authenticator app?

A: They must contact support@boxphish.com to reset their MFA.