--- title: Set up and manage Multi-factor authentication (MFA) description: Enable and manage multi-factor authentication (MFA) in Virtualbadge.io. Set up an authenticator app or email, save recovery codes, and secure your accounts. --- [Skip to content](https://help.virtualbadge.io/article/mfa#main-content) - [English](https://help.virtualbadge.io/article/mfa) - [Deutsch](https://help.virtualbadge.io/de/article/mfa) English Show submenu for translations [Contact Support](https://help.virtualbadge.io/article/kb-tickets/new?hsLang=en) [![Virtualbadge.io White-2](https://help.virtualbadge.io/hs-fs/hubfs/logo/Virtualbadge.io%20White-2.png?width=300&height=40&name=Virtualbadge.io%20White-2.png)](https://www.virtualbadge.io/) Open main navigation Close main navigation - - [English](https://help.virtualbadge.io/article/mfa) - [Deutsch](https://help.virtualbadge.io/de/article/mfa) English Show submenu for translations - [Contact Support](https://help.virtualbadge.io/article/kb-tickets/new) - [Go to Admin Dashboard](https://admin.virtualbadge.io/) [Go to Admin Dashboard](https://admin.virtualbadge.io/) Hello! How can we help you? - There are no suggestions because the search field is empty. 1. [Help Articles Virtualbadge.io](https://help.virtualbadge.io/article?hsLang=en) 2. [Account & Billing](https://help.virtualbadge.io/article/account-billing?hsLang=en) 3. [User Settings](https://help.virtualbadge.io/article/account-billing?hsLang=en#user-settings) # Set up and manage Multi-factor authentication (MFA) ## Add a second layer of security for the users in your Virtualbadge.io account. Multi-factor authentication (MFA) adds an extra step when signing in. In addition to a password, each user confirms their identity with a one-time code, either from an authenticator app or via email. Even if a password is compromised, no one can access the account without that second factor. #### **Why enable it?** Your Virtualbadge.io account is where your team creates, manages, and issues digital badges and certificates. Requiring MFA protects those accounts and the credentials you issue if a password is ever compromised. We recommend enabling it for everyone in your organisation. #### **Supported methods:** - **Authenticator app** *(e.g. Microsoft Authenticator, Google Authenticator)*  Always available and cannot be turned off at the organisation level. - **Email** A one-time code sent to the user's email address. This method is optional and can be switched on or off by an organisation admin. --- ### A. How to enable MFA for your organisation 1. Go to **Settings → Users and Roles**. 2. Turn on **Multi-factor authentication**. 3. In the confirmation dialog, select **Require**. ![](https://help.virtualbadge.io/hs-fs/hubfs/image-png-Aug-26-2026-11-14-45-4646-AM.png?width=450&height=83&name=image-png-Aug-26-2026-11-14-45-4646-AM.png) Once enabled, MFA becomes mandatory for every user in your organisation who hasn't already set it up. There is no grace period, anyone not yet enrolled will be prompted to set it up on their next login. The confirmation dialog also shows how many users still need to enrol. ### What your users see when they enable MFA The next time an affected user signs in, they'll be guided through the setup process automatically. #### 1. Set up an authenticator app On the **Set up two-factor authentication** screen, the user: 1. Opens their authenticator app. If they don't have one, they can download a free app such as Microsoft Authenticator or Google Authenticator. 2. Chooses **Add account** or **Scan QR code** in the app, then scans the QR code shown, or enters the setup key manually. 3. Enters the 6-digit code from the app and selects **Confirm**. ![](https://help.virtualbadge.io/hs-fs/hubfs/image-png-Aug-25-2026-11-43-15-4062-AM.png?width=200&height=405&name=image-png-Aug-25-2026-11-43-15-4062-AM.png) #### 2. Save recovery codes After confirming, the user is shown a set of one-time **recovery codes**. Each code can be used once to sign in if they lose access to their authenticator app. The codes are shown only once, so they should be stored somewhere safe. The user then selects **I've saved my codes, continue** to finish. ![](https://help.virtualbadge.io/hs-fs/hubfs/image-png-Aug-25-2026-11-46-08-4438-AM.png?width=250&height=325&name=image-png-Aug-25-2026-11-46-08-4438-AM.png)   --- ### B. Using email as a 2FA method Email is an alternative sign-in method that allows users to receive a one-time code by email instead of using an authenticator app. To enable it: 1. Go to **Settings → Users and Roles** (**Allowed methods**). 2. Turn on **Allow email as a two-factor authentication method**. ![](https://help.virtualbadge.io/hs-fs/hubfs/image-png-Aug-26-2026-11-16-35-1710-AM.png?width=550&height=68&name=image-png-Aug-26-2026-11-16-35-1710-AM.png) The authenticator app is always available. If both the app and email are enabled, sign-in uses the authenticator app by default. But they will have an option to authenticate via email also. --- ### Turning MFA off To stop requiring MFA for your organisation: 1. Go to **Settings → Users and Roles**. 2. Turn off the MFA requirement and select **Disable** in the confirmation dialog. #### Turn off email as a method To remove email as a sign-in option: 1. Go to **Settings → Users and Roles**. 2. Turn off **Allow email as a two-factor authentication method** and select **Turn off**. - [Onboarding & Setup](https://help.virtualbadge.io/article/onboarding-setup?hsLang=en) - [Features](https://help.virtualbadge.io/article/features?hsLang=en#main-content) - [Managing Credentials](https://help.virtualbadge.io/article/features?hsLang=en#managing-credentials) - [Recipient Management](https://help.virtualbadge.io/article/features?hsLang=en#recipient-management) - [Email Delivery & Customization](https://help.virtualbadge.io/article/features?hsLang=en#email-delivery-customization) - [Sharing & Social Integrations](https://help.virtualbadge.io/article/features?hsLang=en#sharing-social-integrations) - [Security & Verification](https://help.virtualbadge.io/article/features?hsLang=en#security-verification) - [Insights & Reporting](https://help.virtualbadge.io/article/features?hsLang=en#insights-reporting) - [Credential Design](https://help.virtualbadge.io/article/credential-design?hsLang=en) - [Access & Share Credentials](https://help.virtualbadge.io/article/access-share-credentials?hsLang=en) - [Trainer Module](https://help.virtualbadge.io/article/trainer-module?hsLang=en#main-content) - [Trainer module settings](https://help.virtualbadge.io/article/trainer-module?hsLang=en#trainer-module-settings) - [Creating a Training](https://help.virtualbadge.io/article/trainer-module?hsLang=en#creating-a-training) - [Recipients in the Trainer Module](https://help.virtualbadge.io/article/trainer-module?hsLang=en#recipients-in-the-trainer-module) - [Integrations & API](https://help.virtualbadge.io/article/integrations-api?hsLang=en) - [Account & Billing](https://help.virtualbadge.io/article/account-billing?hsLang=en#main-content) - [Billing](https://help.virtualbadge.io/article/account-billing?hsLang=en#billing) - [Organisation Settings](https://help.virtualbadge.io/article/account-billing?hsLang=en#organisation-settings) - [User Settings](https://help.virtualbadge.io/article/account-billing?hsLang=en#user-settings) - [Element Library](https://help.virtualbadge.io/article/account-billing?hsLang=en#element-library) - [Organisation Hub](https://help.virtualbadge.io/article/organisation-hub?hsLang=en) - [FAQs](https://help.virtualbadge.io/article/faqs?hsLang=en#main-content) - [Credential Management](https://help.virtualbadge.io/article/faqs?hsLang=en#credential-management) - [Trainer Module](https://help.virtualbadge.io/article/faqs?hsLang=en#trainer-module) - [Email & Delivery Issues](https://help.virtualbadge.io/article/faqs?hsLang=en#email-delivery-issues) [![Chill listening crop-3](https://help.virtualbadge.io/hs-fs/hubfs/Virtualbadge.io%20Dark%20(2).png?width=181&height=24&name=Virtualbadge.io%20Dark%20(2).png "Chill listening crop-3")](https://www.virtualbadge.io/) Virtualbadge.io Help Center Copyright © 2026, FutureNext GmbH