Multi-Factor Authentication

MFA adds an extra layer of security to accounts by requiring all employees to use an additional method of verification to log into their account.

Contents

  • How to add MFA to your organization
  • Enabling MFA via an authentication app
  • Logging into Mako with MFA enabled

How to add MFA to your organization

An owner of an organization must enable MFA for the orgnaization before employees can set it up. After enabling MFA, all employees will be required to set up their second authentication step the next time they log into Mako.

  • Navigate to Settings > Organization
  • Scroll down to Security
  • Click Turn On 2-Step Authentication and confirm

Enabling MFA via an authentication app

When logging into Mako after MFA has been turned on, employees will be prompted to set up their second factor of authentication through an authentication app

Mako does not currently support using SMS as a second factor of authentication
  • Install or open an Authentication app such as Google Authenticator or Microsoft Authenticator.
  • Scan the QR code that appears on Mako, using the authenticator app
    • Optionally, click Enter Code Manually to enter an alphanumeric code into the authenticator app instead of scanning a QR code
  • After scanning the QR code, enter the 6-digit code provided by the authenticator app into Mako and click Next
  • After successfully entering the code, Mako will generate backup codes. You should download and store the backup codes in a secure location
    • Backup codes can be used to log into your Mako account if you do not have access to your device used for MFA

Logging into Mako with MFA enabled

After setting up MFA, employees will need to enter an authentication code each time the log into Mako

  • After entering your username and password, open your authentication app and type in the code that appears for Mako
  • If you do not have access to your device or have any other problems with MFA, click Use Backup Code and enter one of your backup codes that were previously saved
    • Each backup code will only be valid once and cannot be used repeatedly