Skip to main content

How to enable multi-factor authentication (MFA)

Turn on multi-factor authentication (MFA) for your wxrks account with an authenticator app, and what to do if you later need to disable it.

Multi-factor authentication (MFA) adds a second step to logging into wxrks: after your password, you also enter a one-time code from an authenticator app. It's one of the simplest ways to protect your account if your password is ever guessed or leaked.
​

💡 Who is this for? This guide is for any wxrks user who needs to enable MFA on their own account, and for Account Admins who want to require it for everyone on the account.

Before you start

You'll need an authenticator app on your phone to generate the one-time codes — Google Authenticator, Authy, and Duo Mobile all work. Install one before you begin if you don't already have one.
​

Each person can turn on MFA for their own account, as described below. An Account Admin can also require it for every user: go to Settings > Account Settings > Identity & Security > Security Policies and turn on Require TOTP multi-factor authentication for every user on this account. When that is on, a user who has not set up MFA is asked to enroll the next time they sign in with a password.
​

ℹ️ Note: This requirement doesn't apply to users who sign in through single sign-on. For those users, multi-factor authentication is managed in your identity provider. See Set up SAML 2.0 single sign-on.

Enable MFA

  1. Click your avatar in the top-right corner and select Profile.

Avatar menu open in the top-right corner of wxrks, with the Profile link highlighted above Logout

  1. Open the Security tab.

  2. Turn on the MFA toggle.

Profile page on the Security tab showing the Change your password form and, below it, the MFA section with its toggle highlighted, currently off and labeled MFA is currently disabled

  1. An Enable MFA window opens with a QR code. Open your authenticator app and scan it to add wxrks as an entry.

  2. Your app will start generating a 6-digit code. Enter that code into the MFA code field and click OK.

Enable MFA modal with the QR code area (masked in this screenshot) and the 6-digit MFA code entry boxes highlighted

Once the code is accepted, MFA is active on your account — the Security tab now shows the toggle on and "MFA is currently enabled." From your next login onward, you'll enter a fresh code from your authenticator app after your password.

Security tab with the MFA toggle now on and the MFA enabled label highlighted

Disabling MFA

Account Admins can turn their own MFA back off directly from this same Security tab — click the toggle again and confirm the prompt ("Disable MFA for your account?"). If MFA is required for the account, you'll be asked to set it up again at your next login.
​

Any other user who clicks the toggle while MFA is on will instead see the message "To disable MFA, please contact your account administrator." — there's no self-service off switch for non-admin accounts. Your Account Admin can turn it off for you from People > Users > [your user] > Actions > Reset MFA.

Troubleshooting

Lost or replaced the phone your authenticator app was on? You won't be able to generate a valid code to log in, and there's currently no self-service backup-code recovery. Ask your Account Admin to reset MFA on your account (People > Users > [your user] > Actions > Reset MFA) so you can log back in and re-enroll. If you can't reach an Account Admin, contact [email protected].
​

You can also search the wxrks Community forum if you'd like to see how others have handled a similar situation.

Related Articles
Did this answer your question?