What is Multi-Factor Authentication

Multi-Factor Authentication (or MFA for short - sometimes also called 2FA) is a method of securing your user account by adding an extra layer of security every time you log in.

You might have noticed this before when accessing your accounts on other secure websites (eg. your online banking).

How does MFA work?

When MFA has been enabled on your TutorCruncher account, whenever you log in you'll be asked for your email address and password as normal. However, after that screen, you'll be asked to enter a six-digit numeric code which will be shown to you in a mobile app. The purpose of this is to keep your account secure enough so that even if you lose your password, your account still isn't compromised as long as you control access to the MFA code.

How do I enable MFA on my account?

To enable MFA,

  1. Click the dropdown in the top right-hand side of the screen and select the option for Account, this brings you to your user account overview.
  2. Click the button to Enable Multi-Factor Authentication
  3. Download a mobile app for authentication codes (our favourites are either Authy or the Google Authenticator).
  4. Use your new app to scan the QR code presented to you on TutorCruncher, or enter the manual code displayed below it into the app.
  5. Enter your password.
  6. Enter the six-digit code shown to you in the app alongside your newly enabled MFA account and click Enable.
  7. MFA has now been enabled.
Here's where to go to enable MFA on your account

Here's where to go to enable MFA on your account

How do I disable MFA on my account?

  1. In the top right-hand side of the screen and select the option for Account, this brings you to your user account overview.
  2. Click Disable Multi-Factor Authentication
  3. Enter your password.
  4. Enter the six-digit code from your Authenticator mobile app.
  5. Click Disable.

How do I disable another user's MFA?

  1. Go to that user's account.
  2. Click Disable Multi-Factor Authentication.

NB: An administrator can remove MFA from any user they wish to except another admin. Only admins with the "Owner" permission can remove the MFA setup from another administrator.

Did this answer your question?