Multi-Factor Authentication (MFA)

Add an extra layer of security to protect your Mentorloop account

Note: MFA is only available for password authenticated users.

What is Multi-Factor Authentication?

Multi-Factor Authentication (MFA) provides an additional security layer for your Mentorloop account. After entering your password, you'll need to provide a time-based code from an authenticator app on your phone. This means that even if someone obtains your password, they won't be able to access your account without also having access to your authenticator app.

Why Enable MFA?

Enhanced Security Protect your account from unauthorized access, even if your password is compromised.	Data Protection Keep your mentoring relationships and personal information secure.
Quick & Easy Fast authentication using your phone's authenticator app takes just seconds.	Peace of Mind Know that your mentoring data and connections are protected.

How to Enable MFA on Your Account

Before you start

You'll need an authenticator app installed on your mobile device. Popular options include:

Google Authenticator (iOS & Android)
Microsoft Authenticator (iOS & Android)
Twilio Authy (iOS & Android)
Any other TOTP-compatible authenticator app

Setup steps

Step 1: Access your account settings

Click on your profile picture in the top right corner of Mentorloop, then click Account under Account settings in the dropdown menu.

Step 3: Click Add MFA

Click the button to enable Multi-Factor Authentication for your account.

Step 4: Scan the QR code

Open your authenticator app and scan the QR code displayed on the screen. Your app will automatically add Mentorloop and begin generating time-based codes. You can alternatively copy the code and paste it into your authenticator app instead of scanning the QR code.

Step 5: Enter your first code

Enter the 6-digit code from your authenticator app to verify the setup is working correctly.

Step 6: Complete setup

Once verified, MFA is now enabled on your account. You'll need to enter a code from your authenticator app each time you log in.

Logging in with MFA

Once MFA is enabled, your login process will include these steps:

Enter your email address and password as usual
Open your authenticator app on your phone
Find the Mentorloop entry and note the 6-digit code
Enter the code in the MFA field on the Mentorloop login screen
Click Next to access your account

Time-Based Codes

Authentication codes expire after 30 seconds. If you enter a code and it doesn't work, wait for the next code to generate and try again. Make sure the time on your phone is synchronized correctly.

Removing MFA from your Account

If you need to remove MFA from your account (and your program doesn't require it), you can do so at any time.

Step 1: Access your account settings

Click on your profile picture in the top right corner of Mentorloop, then click Account under Account settings in the dropdown menu.

Step 2: Click Remove MFA

Click the button to disable Multi-Factor Authentication.

Step 3: Confirm removal

You'll be asked to enter both your password and a current MFA code to confirm the removal. This ensures only you can disable MFA on your account.

Note about program requirements

If your program requires MFA for all participants, you won't be able to remove it while you're enrolled. The remove button will be disabled. Contact your Program Coordinator if you have questions about this requirement.

Important: Re-adding MFA

If you remove MFA and then decide to add it back, you'll want to delete the old Mentorloop entry from your authenticator app before scanning the new QR code. The old codes will no longer work with your account.

Troubleshooting

My MFA code isn't working

Try these solutions:

Wait for the next code to generate (codes refresh every 30 seconds)
Check that the time on your phone is set to automatic/network time
Ensure you're entering the code for Mentorloop specifically (not another service)
If the problem persists, contact Mentorloop support

I got a new phone - what do I do?

Before disposing of your old phone, migrate your authenticator codes to your new device. Most authenticator apps have built-in migration features:

Google Authenticator: Use the Transfer Accounts feature in settings
Microsoft Authenticator: Use the backup and restore feature
Authy: Automatically syncs across devices when you sign in

If you've already lost access, contact Mentorloop support to reset your MFA.

I lost access to my authenticator app

If you can no longer access your authenticator app and can't log in to Mentorloop, contact the Mentorloop support team. They can reset your MFA so you can set it up again with a new QR code.

Can I use SMS for MFA codes?

Mentorloop MFA uses TOTP (Time-based One-Time Password) codes via authenticator apps only. SMS-based codes are not supported. Authenticator apps are more secure than SMS and work without cellular connectivity.

I'm re-adding MFA but my old codes still show in my app

When you remove and re-add MFA, you should delete the old Mentorloop entry from your authenticator app before scanning the new QR code. The old codes will no longer work with your account after MFA has been reset.

Best Practices

Security recommendations

Enable MFA as soon as possible - Don't wait until it's required.
Use a secure authenticator app - Choose reputable apps like Google Authenticator or Microsoft Authenticator.
Backup your codes - Some authenticator apps offer backup features. We recommend using them.
Keep your phone secure - Use a PIN, password, or biometric lock on your phone.
Plan ahead for phone changes - Migrate your authenticator codes before getting rid of your old device.
Use strong, unique passwords - MFA is most effective when combined with a strong password.

Need help?

If you encounter any issues setting up or using MFA, our support team is here to help.