<aside> 🔐

MFA adds a 6-digit time-based code on top of your password at sign-in. It's optional but strongly recommended — especially for managers who can change billing or invite team members.

</aside>

What you need

• A TOTP-compatible authenticator app on your phone or laptop. Any of these work:
  • Google Authenticator
  • 1Password (any version)
  • Authy
  • Microsoft Authenticator
  • Built-in iOS Passwords (iOS 17+)
• Two minutes

Where MFA enrollment lives

URL: /mfa/enroll — reachable from Settings → Security → Set up MFA.

Enrollment walkthrough

Steps

1. From Settings → Security, click Set up MFA
2. The page shows a QR code plus a manual-entry secret below it
3. Open your authenticator app and either:
   • Scan the QR code (most apps), or
   • Tap “Add account / Manual entry”, paste in the secret string, and label it “ResaleCertify”
4. Your authenticator app starts displaying a 6-digit code that rotates every 30 seconds
5. Type the current code into the Verification code field on this page
6. Click Verify & enable MFA

On success, you're redirected back to Settings, and the Security section now shows your active factor with the option to remove it.

Signing in with MFA enabled

Once MFA is on, the login flow gets one extra step: