Manage multi-factor authentication (MFA) settings

These MFA management options are only available for non-federated users.

You’re a non-federated user if your identity is authenticated directly by STACKIT Identity Provider (IdP). This means authentication isn’t delegated to another IdP.

Multi-factor authentication (MFA) enrollment is typically completed during your initial login, but you can also activate it at any point during the grace period. The procedure for the initial setup is detailed in the MFA enrollment guide.

You can change your MFA settings at any time.

Add a verification method

1. After you have logged in to your account, navigate to User settings.

2. Click Password & Security, then click Multi-factor authentication.

3. Choose between two methods:

   • Authenticator application: The authenticator application is installed on your mobile phone and generates a verification code.
   • Email: STACKIT sends a verification code to your email address.

   Next to each method’s description, there is an Add method button.

4. Click Add method for the method you want to set up.

5. Confirm your choice in the confirmation message.

6. STACKIT logs you out and redirects you to the login page to complete the enrollment for the chosen method.

7. Follow the on-screen instructions to finalize the setup as described in the MFA enrollment guide.

Set a primary verification method

If you have more than one verification method set up, you can select which one of them is your primary method. STACKIT uses the primary method by default to verify your identity. You can always switch between the methods.

1. After you have logged in to your account, navigate to User settings.
2. Click Password & Security, then click Multi-factor authentication.
3. Click the kebab menu next to the method.
4. Click Set as primary.
5. Confirm your choice in the confirmation message. A notification confirms the change.
6. At your next login, STACKIT uses the selected method by default to verify your identity.

If you forgot or do not have access to your primary verification method

Use either the secondary verification method or one of your one-time use recovery codes to access your account.
Then go to the MFA settings page and reset your primary method.

Switch between verification methods

If you have more than one verification method, you can switch between them in the verification step while logging in.

1. Enter your username and password.
2. On the Enter your code page, click either Use code sent by email instead (when the primary method is an authenticator app) or Use code from auth app instead (when the primary method is email).
3. The Enter your code page switches to the other method.

Remove a verification method

If you have more than one verification method set up, you can remove any method you no longer want to use.

1. After you have logged in to your account, navigate to User settings.
2. Click Password & Security, then click Multi-factor authentication.
3. Click the kebab menu next to the method.
4. Click Remove method.
5. Confirm your choice in the confirmation message. A notification confirms the change.

If you have only one verification method set up, you need to add another one before you can remove the current one.