Two-Factor Authentication (MFA)
Overview
Soarvo supports multi-factor authentication (MFA), also called two-factor authentication (2FA), to add an extra layer of security to your account. With MFA enabled, you sign in with your password and a one-time code from an authenticator app.
ℹ️
Recommended for: All Administrators and Project Managers. MFA is the single most effective way to protect a Soarvo account from password compromise.
📸
Screenshot:
Shows: Account Information showing MFA Disabled
By default, MFA is Disabled on every account.
mfa-01-account-info.png
Shows: Account Information showing MFA Disabled
By default, MFA is Disabled on every account.
Setting Up MFA
MFA setup is initiated from your account profile area in the portal. The exact path may vary depending on your organisation's configuration:
- Log in to live.soarvo.com.
- Click the avatar (top-right) → Account information.
- Look for the Security or Multi-factor authentication section.
- Follow the prompts to scan a QR code with your authenticator app (Google Authenticator, Microsoft Authenticator, Authy, 1Password, or similar).
- Enter the 6-digit code from your app to confirm setup.
⚠️
If the option isn't visible in your account, your organisation may enforce MFA centrally or restrict who can enable it. Contact your Soarvo Administrator, or contact Soarvo support via
soarvo.com/contact.
📸
Screenshot:
Shows: MFA setup screen with QR code
When you select Enabled and click Save changes, Soarvo presents a QR code for your authenticator app.
mfa-02-enable-mfa.png
Shows: MFA setup screen with QR code
When you select Enabled and click Save changes, Soarvo presents a QR code for your authenticator app.
Logging In with MFA
Once MFA is enabled, your sign-in flow is:
- Enter your email and password on the login page.
- When prompted, open your authenticator app and read the current 6-digit code.
- Type the code into Soarvo and click Continue.
The code refreshes every 30 seconds — if it expires before you submit, wait for the next one.
Recovery Codes
⚠️
Save your recovery codes when prompted during MFA setup. If you lose access to your authenticator app (lost phone, app reset), recovery codes are the only way to sign in without contacting support. Store them in a password manager or printed somewhere safe.
Checking Who Has MFA Enabled
Administrators can review which users have MFA active:
- Click the account icon → User Management.
- Open the Filters panel on the left.
- Under MFA login used, select Yes to see users who have signed in with MFA, or No to see those who haven't.
💡
Tip: Use this filter to nudge users who haven't enabled MFA yet, or to confirm Administrator coverage before sensitive operations.
If You're Locked Out
If you can't access your authenticator app and have no recovery codes:
- Contact your organisation's Soarvo Administrator first — they may be able to reset MFA on your account.
- If you are the Administrator, contact Soarvo support via soarvo.com/contact from a verified email address. Identity verification will be required before MFA can be reset.