Multi-factor authentication (MFA)

What is MFA?

MFA (Multi-Factor Authentication) is an additional layer of security for your account during sign-in.

After entering your login credentials, the system will ask you to provide a one-time verification code generated by an authenticator app installed on your phone or a code sent to your email address. Codes generated by an authenticator app change automatically every few seconds and can only be used once. Email verification codes remain valid for 5 minutes.

This means that even if someone learns your password, they won't be able to access your account without access to your phone or your email inbox.

Why should you enable MFA?

MFA significantly increases your account security and protects it from unauthorized access.

The additional verification helps protect your account in situations such as:

• your password is accidentally exposed,
• you use the same password for multiple services,
• you become a victim of phishing or another attempt to steal your credentials.

Enabling MFA takes about 2 minutes and greatly improves the security of your account.

How to enable MFA?

You can configure MFA by going to:

Account icon → Your name → Multi-Factor Authentication

You can choose one of two authentication methods:

• Authenticator app
• Verification code sent by email

The setup process takes approximately 2 minutes.

Using an authenticator app

1. Click Enable,
2. Scan the displayed QR code or manually enter the provided key into an authenticator app such as Passwords (iOS), Google Authenticator, or Microsoft Authenticator,
3. Enter the first verification code generated by the authenticator app,
4. Copy or save your recovery codes in a safe place and never share them with anyone,
5. Click Verify.

Using an email verification code

1. Click Enable,
2. Enter the verification code sent to your email address,
3. Click Verify.

I sign in using Google, Microsoft, or another SSO provider

If you sign in to Unrubble using an external identity provider, such as:

• Google,
• Microsoft,
• Apple,
• etc.,

and MFA is already enabled for that account, you don't need to do anything else.

In this case, your identity provider is responsible for securing your sign-in.

Once the setup is complete, every time you sign in, you will be asked to enter your password and either a one-time code generated by your authenticator app or a one-time code sent to your email address.

You can enable both authentication methods. When signing in, you'll be able to choose which method you want to use to verify your identity.

We encourage you to enable MFA today and take advantage of the additional protection for your account and data.

Updated on: 07/09/2026