How to secure my account with multifactor authentication (MFA)?
Smash now offers multifactor authentication (MFA) to ensure more secure authentication to paid subscribers. MFA is not available for users logging in with Single Sign-On (SSO).
There are two MFA options for Smash account:
- authentication by email
- authentication using an authenticator app
The process for enabling multi-factor authentication on your Smash account will differ depending on whether you are the account administrator (root) or a regular user (member).
Enable multi-factor authentication as the root of the account
To strengthen the security of your root account, you can follow these steps:
- Go to your account and click on the Profile tab in the top right corner.
- Choose and enable one of the two authentication methods
- If you enable the email method: a code will be sent to the email address associated with your Smash account. The code is valid for 15 minutes. Once the code is entered, authentication is configured.
- If you enable the mobile app method: make sure you have installed an app such as Google Authenticator or Microsoft Authenticator. Scan the QR code displayed on your screen using the mobile app.
- If you enable both methods, email authentication will be used by default when signing in. To set your preferred default method, click on “…” - “Set as default”.
Manage multi-factor authentication for the members of your account
- Go to Administration - Security
- Choose your preferred configuration option:
- Require two-factor authentication for members and choose one of the two methods. Members who haven't enabled MFA will be required to do so the next time they log in to their account.
- Enable one or both methods without requiring MFA for all members. Only those who wish to activate it will be able to do so voluntarily.
Enable multi-factor authentication as a member of the account
- If MFA has been required by the account administrator (root):
Log in and enable the required method or the method of your choice:
- If you enable the email method: a code will be sent to the email address associated with your Smash account. The code is valid for 15 minutes. Once the code is entered, authentication is configured.
- If you enable the mobile app method: make sure you have installed an app such as Google Authenticator or Microsoft Authenticator. Scan the QR code displayed on your screen using the mobile app.
- If authentication is not required by the administrator:
- Go to the Profile tab in the top right corner.
- Choose and enable one of the two authentication methods
- If you enable the email method: a code will be sent to the email address associated with your Smash account. The code is valid for 15 minutes. Once the code is entered, authentication is configured.
- If you enable the mobile app method: make sure you have installed an app such as Google Authenticator or Microsoft Authenticator. Scan the QR code displayed on your screen using the mobile app.
- If you enable both methods, email authentication will be used by default when signing in. To set your preferred default method, click on “…” - “Set as default”.
Log in to Smash using two-factor authentication
Once you’ve set up two-factor authentication, you can log in with this additional layer of security.
- Go to the usual login page and enter your email and password as usual.
- Enter the verification code, received either by email or via the mobile app, depending on the method you selected.
- Click on "confirm"
That's it! You're logged to Smash, let's send your files in total security.
Change your MFA method
Even if you initially chose one MFA method over another, you can change it at any time. Your current authentication method will be removed, and you will need to set up the new one.
From the Profile tab, simply click on “…” → "Remove" next to the current method, then click "Enable" on the new method of your choice.
Questions about MFA?
Our team is available to answer any questions or suggestions you may have about multi-factor authentication (MFA). Don’t hesitate to reach out to us.