Multi-factor authentication (MFA) requires users to verify their identity with a one-time code from an authenticator app, like Google Authenticator, Microsoft Authenticator, or Authy.
Multi-factor authentication is available to customers on all paid plans.
How to enable MFA
An admin on your account can enable MFA in their company settings.
Click the gear icon ⚙️ in the left sidebar.
Click Company Settings.
Click Security in the left sidebar.
Click Multi-Factor Authentication near the top of the screen.
Toggle to require MFA.
The next time they sign in, users will be prompted to set up an authenticator app with a QR code or key, then retrieve and enter a one-time code to complete their sign-in. They can choose any authenticator app they like.
Important Notes:
Users must sign out and sign back in to trigger authentication, including users added after MFA is enabled (MFA is not part of accepting an invite).
MFA applies at the user level. If a user is associated with multiple companies and any of those companies requires MFA, authentication will be required to sign in to any other company.
MFA is currently supported on desktop and mobile browsers, not on the Breezy mobile app.
Breezy’s API access token is not restricted by MFA.
MFA can be used along with SSO.
How to reset a user’s MFA
If needed, an admin can reset a user’s authentication in their company settings.
Click the gear icon ⚙️ in the left sidebar.
Click Company Settings.
Click People in the left sidebar.
Find the right person and click Reset MFA to the right of their name.
The user will receive an email with a link to sign in and verify their account with an authenticator app.