Beginning January 31, 2026, Multi-Factor Authentication (MFA) will be required for all accounts. This change is part of our ongoing commitment to protect your data and maintain the highest security standards.
What You Need to Know
MFA adds an extra layer of security to your account by requiring more than just a password to sign in. This significantly reduces the risk of unauthorized access, even if your password is compromised.
Setting Up MFA
You can set up MFA here using one of the following methods:
- Authentication App (Recommended): Use a dedicated authenticator application (such as Google Authenticator, Microsoft Authenticator, or Authy) on your mobile device or computer.
- SMS (Text Message): Receive a verification code via text message to your mobile phone.
Important Requirements
MFA is mandatory and cannot be disabled or bypassed (with one exception, see the FAQ section below). This requirement applies to all users to protect data and maintain our security standards. All users must have at least one supported MFA method configured in order to access the platform. Accounts without MFA enabled will be prompted to set up MFA after January 31st.
Device Options
We understand that some users may not be issued a company mobile phone or may be unwilling to use a personal device. In these cases, SMS to a personal phone is not the only supported option. Users may instead configure an authenticator application on a company-issued laptop or desktop device, where permitted by internal policy.
This flexibility ensures that all users can comply with the MFA requirement while respecting individual preferences and company policies regarding device usage.
Action Required
Please set up MFA on your account before January 31, 2025 to ensure uninterrupted access to the platform. You can configure MFA in your account settings at any time.
Frequently Asked Questions (FAQs)
MFA will be mandatory for all accounts starting January 31, 2026. After this date, accounts without MFA enabled will not be able to authenticate. We will be running a migration throughout the week and project to be fully transitioned by February 6, 2026.
No. MFA is a mandatory security requirement and cannot be disabled or bypassed (one exception). The administrator no longer has the ability to disable MFA from the data room.
Yes, the administrator has the ability to pause 2FA for up to 7 days.
You have options! You can use SMS to a personal phone number, or you can configure an authenticator application on a company-issued laptop or desktop device (where permitted by your internal policy). The authenticator app option provides flexibility for users who prefer not to use personal mobile devices.
Most standard authenticator applications are supported, including Google Authenticator, Microsoft Authenticator, Authy, and other TOTP-based authenticator apps. You can use these apps on either a mobile device or a desktop/laptop computer.
Accounts without MFA enabled will be unable to authenticate into a room after the deadline. You will need to set up MFA when you attempt to login.
Reach out to your room Administrator to pause MFA or reset MFA.
Your current access will not be affected until January 31, 2026. However, we strongly recommend setting up MFA as soon as possible to familiarize yourself with the process and ensure a smooth transition.
You can set up MFA in your profile settings.
Yes, if you log in via SSO and restrict login policy is enabled, we allow the administrator of the room to disable MFA so users don't need to verify MFA twice.
The other exception is when MFA is paused for the user, which the room administrator can change at any time.
For additional support or questions, please contact our support team at [email protected].