Breadcrumbs

Setting Up MFA for Admins

The Enpass Admin Console requires two-factor authentication for all admins. By default, login uses your password along with a one-time code sent to your work email. For stronger security, you can upgrade to an authenticator app (TOTP) in place of the emailed code.

Note: Each admin configures MFA for their own account individually. MFA is set up per-admin from the Profile menu. If your organization has enforced SSO, the MFA option will be unavailable — login is handled entirely through your Identity Provider in that case. See Enforcing SSO for Admins for more details.

Set Up an Authenticator App

  1. In the top-right corner of the Admin Console, click the User Menu and select Profile.

  2. In the Admin Profile section, click Set Up Authenticator.

  3. Follow the on-screen instructions to scan the QR code with your authenticator app and add the account.

  4. Copy or download your backup codes and store them somewhere secure — you will need these if you ever lose access to your authenticator app.

  5. Click Done.

Logging In with a Backup Code

If you have lost access to your authenticator app, you can use a backup code to sign in:

  1. On the Admin Console login screen, click Use Backup Code Instead.

  2. Enter one of your backup codes and click Verify.

  3. Enter the one-time code sent to your email to complete login.

Checking and Regenerating Backup Codes

To check remaining backup codes:

  1. Click the User Menu and select Profile.

  2. Under Admin Profile > Two-step verification, the number of remaining codes is shown in parentheses next to Regenerate Backup Codes.

To generate a new set of backup codes:

  1. Click the User Menu and select Profile.

  2. Under Admin Profile > Two-step verification, click Regenerate Backup Codes.

  3. Follow the on-screen instructions. Note that generating new codes invalidates the old ones.