Question
How do I manage Multi-Factor Authentication settings on my account?
Solution
You can set up Multi-Factor Authentication in your HotDoc account in the 'Security' section. Please follow the steps below to see how to do this, whether you're accessing your HotDoc account on your web browser or through the HotDoc app. We've also listed some FAQs at the bottom of this article.
What is Multi-Factor Authentication?
Multi-factor authentication (MFA) adds an extra layer of security to your HotDoc account.
Once MFA is turned on, you’ll need both your password and a one-time security code to log in. This helps keep your account and personal information secure.
The security code will be sent to your verified email address each time you log in from a new device or browser.
If you'd like to set up MFA for your HotDoc account, follow the steps in this article.
How do I set up Multi-Factor Authentication on my account?
-
Navigate to the 'HotDoc login' page and log in to your HotDoc account using your email or mobile number and password.
Click on the account icon to access your settings.
-
Go to the Security tab. Under Multi-factor authentication, click Activate.
-
If prompted, confirm your current password to verify your identity, and select Continue.
If you've already entered your password within the last 15 minutes (to log into your HotDoc account, for example) you will not need to enter it again.
-
A one-time security code will be sent to your email address. Copy this code.
-
Paste the code into the Enter your code field, and click Continue.
You will need to enter the code within five minutes of it being sent, otherwise the code will expire. If it has expired, you’ll need to click Start over to request a new one.
If you have not received the code, please check your spam/junk folder, or use the option to resend the code.
ⓘ Please note -
Your Email multi-factor authentication has now been activated, and you will be prompted to click ‘Finish’. You will also receive an email confirmation informing you that the setup has been successful.
-
This will take you back to the main Security tab, where it will show that your account is activated for MFA.
How do I deactivate Multi-Factor Authentication on my account?
After logging into your HotDoc account, click on the account icon to access your settings.
-
Go to the Security tab. Under Multi-factor authentication, click Deactivate
-
Tick the box to acknowledge that disabling MFA will reduce the security of your account, then click Continue.
-
If prompted, confirm your current password, and click Continue.
-
Your MFA multi-factor authentication has now been deactivated, and you will be prompted to click Finish. You will also receive an email confirmation informing you that this has been successfully deactivated.
-
This will take you back to the main Security tab, where you will see the option to reactivate MFA.
FAQs
How do I log in using Multi-Factor Authentication?
To log in with multi-factor authentication, all you need is your account details and access to the email used to set up MFA. This email will be sent a 'one-time password' that you can use to securely log in. For a more detailed walkthrough, please see: How do I log into my HotDoc Account?
Am I required to have a verified email to activate Multi-Factor Authentication?
No. You do not need to already have a verified email address to set up Multi-Factor Authentication (MFA).
During setup, we’ll send a one-time security code to your email address. Once you enter the code and complete the setup process, your email address will automatically be verified.
After setup is complete, your email address will appear as verified in the Profile section of your account settings.
What Multi-Factor Authentication methods do we support?
HotDoc currently supports email for multi-factor verification.
What if I lose access to my authenticated email?
If you lose access to the email address linked to Multi-Factor Authentication (MFA), you will not be able to receive your one-time security codes. This means you may be unable to log in to your HotDoc account.
To avoid losing access to your account, we recommend using a personal email address that you’ll always be able to access.
We do not recommend using a work or school email address for MFA, as access to these accounts may change in the future.
What happens if I don't finish the setup process?
Activation: We don’t activate MFA on your account until you've successfully confirmed the one-time password sent to your email. Closing the setup form before this happens means that MFA will not be activated.
Deactivation: We won’t deactivate MFA on your account until you've successfully confirmed your password. Closing the deactivation form before this happens means that we will not deactivate MFA on your account.
Why haven't I received a one-time code in my email inbox?
The email may take up to five minutes to arrive; it may also land in your Junk/Spam folder, so be sure to check. Additionally, check that the email address associated with the account is in the inbox you're checking.
Does the email verification code expire?
Yes. For security reasons, the email verification code will only be valid for five minutes. This means that five minutes after requesting a one-time password, your code will no longer be valid. You will then need to request a new code by clicking 'Start over' and beginning the process again. For security reasons, we will always ask for your credentials again.