Overview
Two-Factor Authentication (2FA) adds an extra layer of security to the Client Portal. When enabled, client users must complete an additional verification step during login to ensure only authorized users can access the portal.
Use Case
Enable 2FA when you want to strengthen client portal security without significantly impacting the login experience.
How 2FA Works
The client logs in using a magic link or PIN.
If 2FA is enabled, the system asks for a One-Time Password (OTP)
The OTP is sent to the client’s registered email address
After successful verification, the client can access the portal
Device-Based Verification
An OTP is required for every new or unrecognized device
Once a device is verified, it is trusted for 30 days
During this period, the client will not be asked for an OTP on that device
After 30 days, OTP verification is required again
How to Enable or Disable 2FA
Go to Settings
Navigate to Questions → Client Portal → Question Settings
Enable or disable Two-Factor Authentication (2FA) as needed
2FA will be applied firm-wide once enabled.
