Multi-factor authentication (MFA) adds a second check when you sign in. After your password, or after Sign in with Google, Avaza asks for a one-time code. Someone who knows your password still can't get in without it.

Avaza offers two methods:

  • Authentication app (recommended). An app such as Google Authenticator, Microsoft Authenticator or Authy shows a new 6-digit code every 30 seconds. It can run on a phone, a tablet or a computer.
  • Email address. Avaza emails you a 6-digit code each time you sign in. It works well as a backup method.

MFA belongs to your login (your email address), not to one account. Once you set it up, it applies to every Avaza account you sign in to.

Set up MFA

  1. Click your avatar at the top right and choose User Profile. My Profile opens.

  2. Click the Security tab. Under Multi-Factor Authentication Methods, click Add Authentication Method.

    Security tab of My Profile with the Add Authentication Method button under Multi-Factor Authentication Methods, which shows "No methods set up yet"

  3. Read the introduction and click Setup Multi-Factor Authentication.

  4. Under Choose an Authentication Method, pick Authentication App (TOTP Code Generator) or Email Address, then follow the steps below.

If your account requires MFA, Avaza opens the same setup as soon as you sign in.

With an authentication app

  1. Open your authenticator app, add a new account and scan the QR code on the screen.
    If you can't scan it, click Copy next to Secret Setup Key and enter the key in the app by hand. The app lists the entry as Avaza, with your login email.

  2. Click Continue.

  3. Give this authenticator a name you'll recognise, such as "Google Authenticator" or "Work phone". Names help when you set up more than one.

  4. Enter the 6-digit code the app shows and click Confirm. When Setup Complete appears, click Continue.

With an email address

  1. Enter an email address and click Confirm Email.
    Use a different address from the one you sign in with, so that one mailbox problem can't lock you out.

  2. Avaza sends a code to that address. Enter it, click Confirm, then click Continue.

Sign in with MFA

  1. Sign in as usual with your email and password, or with Google.

  2. Under Choose Authentication Method, pick one of your methods.

  3. For an authenticator app, enter the code the app shows now. For email, click Send Code, then enter the code from the email.

  4. Click Confirm.

To pick a different method, click Use another authentication method?.

Manage your methods

Your methods are listed under Multi-Factor Authentication Methods on the Security tab of My Profile (avatar › User Profile). To remove one, click Remove and confirm. If your account requires MFA, you can't remove your last method.

Changing phones? Add the new phone as a method first, then remove the old one. Many authenticator apps can also back up your codes or move them to a new device.

Require MFA for your account

  1. Go to Settings › General and scroll down to Security.

  2. Turn on Require Multi-Factor Authentication for Team Members, Require Multi-Factor Authentication for External Contacts, or both.

    Security section of General Settings with the Require Multi-Factor Authentication switches for team members and external contacts, both off

  3. Click Save.

Anyone who can open Settings › General can change these settings: Administrators and Finance Managers. You must be signed in with MFA yourself before you can turn either one on. If you aren't, set up MFA on your own login, sign out, and sign back in with a code.

The next time people in that group open Avaza, anyone without a method is taken to the MFA setup, with a note that the account's Administrator requires it. Anyone who already has a method is asked to sign in again and enter a code.

The same Security section has Login Options for Team Members, which controls whether team members can sign in with an Avaza password, with Google, or both. See single sign-on and login enforcement.

Troubleshooting

My code isn't accepted

  • Authenticator codes change every 30 seconds. Enter the code that's showing now, before it changes.
  • Codes depend on your device's clock. If they keep failing, make sure your phone or computer sets its time automatically.
  • Type the 6 digits without a space, even if your app shows one in the middle.
  • Each code works only once. If you've just used one, wait for the next.
  • For email, use the newest email. Each Send Code replaces the previous code, so request a new one if more than 5 minutes have passed.

The email code doesn't arrive

  • Check that you entered the right address and that you're looking in the right mailbox.
  • Look in your spam or junk folder. Codes come from noreply@avaza.com with the subject "Avaza MFA Verification Code", or "Avaza MFA Email Verification Code" during setup.
  • Wait a couple of minutes, then refresh your inbox. Avaza limits how many codes you can request in an hour, so don't click Send Code again and again.
  • If your company filters email, ask your IT team to allow Avaza's email addresses.

"Too many MFA attempts"

After too many wrong codes, Avaza pauses code entry for your login. Wait 15 minutes, then try again. After a lot of failed attempts, the pause can last up to an hour. Wrong passwords work the same way and show "Too many login attempts".

I've lost my phone or can't get my codes

  • Sign in with another method you've set up, such as your email address. Then add your new phone and remove the old one.
  • If you have no other method, ask an Administrator of your Avaza account to reset your MFA. They can do it themselves from Contacts, so there's no need to contact Avaza Support. You can then sign in with your password and set MFA up again.
  • Contact Avaza Support only if no Administrator can do the reset, for example because you're the only Administrator.

I don't have a smartphone

Install an authenticator app on your computer, or use the email method.