On this page
- What is multi-factor authentication (MFA)?
- Why was this change implemented?
- Can I turn off MFA?
- Do I have to use a mobile number for MFA?
- How can I verify my contact details?
- Who will be impacted by this change?
- Can I use another authentication option, like Google Authenticator?
- How long is the MFA code valid for?
- Will I need to provide MFA every time I log in?
- Why does MC Professional log me out after 15 minutes of inactivity?
- Having trouble receiving MFA codes?
What is multi-factor authentication (MFA)?
MFA is like a double-check for logging into your accounts. It makes sure it's really you by asking for two or more proofs of your identity, like:
- Something you know (your password).
- Something you have (a code sent to your email).
Learn more about what MFA is and how it helps protect your account with its added security benefits.
Why was this change implemented?
MC Professional has implemented MFA to provide an added layer of security for your accounts and ensure compliance with industry security standards.
Can I turn off MFA?
No, MFA is a mandatory security requirement and cannot be disabled. It is an industry-standard measure designed to protect sensitive data and ensure compliance with PCI regulations. For more details, you can review information on PCI compliance.
Do I have to use a mobile number for MFA?
No, MFA doesn’t require a mobile number. Users verify their accounts through email. MC is simplifying the process with email verification, with SMS possible in the future.
How can I verify my contact details?
After launching MFA, the system prompts all administrators to verify their email during sign-in. This serves as the primary contact methods moving forward.
To update your authentication email, contact the support team for help.
Who will be impacted by this change?
Any users with admin access at any level to your MC Professional account are impacted by this change. MFA does not affect member accounts.
Does MFA apply to me? You can learn more about admin permissions in our help article.
Can I use another authentication option, like Google Authenticator?
No, currently MFA is only available through email verification.
Will I need to provide MFA every time I log in?
You must complete MFA every time you log in. However, you can choose "Keep me logged in" to skip MFA for the next 30 days on that specific browser and device. If you switch devices or browsers, clear your cache and cookies, use an incognito session, reset your admin password, or change your admin role, you must verify your identity again with MFA.
Why does MC Professional log me out after 15 minutes of inactivity?
MC Professional automatically logs users out after 15 minutes of inactivity to comply with PCI (Payment Card Industry) security requirements. These regulations are in place to help protect sensitive data and ensure a secure user experience. We understand that session timeouts can be an adjustment, but they are an important part of maintaining compliance and security.
How long is the MFA code valid for?
The email code is valid for 10 minutes.
Having trouble receiving MFA codes?
If you’re not receiving your MFA code, try the following:
- Allow up to 8 minutes for the code to arrive.
- Click “Resend Code” to generate a new one.
- Confirm that you're using an email address you can access.
- Check your junk or spam folders in case the email was filtered.
- If you're on a work or school network, your IT department may be blocking the email—try using a personal network.
- Double-check that you entered your email address correctly.
If you’re still having trouble, please reach out to support for further assistance.