Multi-Factor Authentication (MFA)

With the new Multi-Factor Authentication (MFA), awork gives you an extra layer of security for your login. In addition to your password, you can now verify yourself via an app or email code - quick, secure, and super easy to set up.

Perfect for anyone who wants to better protect their accounts or has special security requirements.

What is MFA?

MFA (also called 2-factor authentication) protects your awork account by requiring a second factor during login - like a code sent via email or generated by an authenticator app. This significantly reduces the risk of unauthorized access.

Supported Authentication Methods

You can currently use the following MFA methods in awork:

• Email code (sent to your verified awork email address)
• App authentication via any TOTP-compatible app such as:
  • Google Authenticator
  • 1Password
  • Authenticator in Safari (macOS)
  • ...and all other TOTP-compatible apps

💡 Passkeys (biometric login) are already separately integrated in awork and can be used independently of MFA.

Setting Up MFA

You can easily enable MFA in your Account Settings:

1. Click on your profile picture in the bottom left of the main menu.
2. Open Account Settings.
3. In the Account > Multi-Factor Authentication (MFA) section, click Manage.
4. Turn on the main toggle for authentication to enable the email code option.
5. You can additionally enable the app code option with the Authenticator App toggle.

Enabling App Authentication

1. Click the toggle next to App Authentication.
2. Scan the displayed QR code with your preferred authenticator app.
3. Enter the generated code to confirm.
4. After successful entry, MFA is enabled.

Email Authentication

• The email option is always active once MFA is turned on.
• It uses your verified awork email address.
• If your email isn't verified yet, you'll be prompted to confirm it before setup.

Disabling or Changing MFA

You can disable MFA anytime in your settings:

1. Click Manage and turn off the toggle to disable MFA or the app method.
2. Confirm the deactivation in the dialog window.
3. After that, MFA must be set up completely again.

💡 Note: Even if the app still knows your code, the setup in awork must be done again.

Logging In with MFA

When MFA is enabled, you'll be asked for a second factor after logging in with your email and password.

How Login with MFA Works

1. You enter your email address and password.
2. You'll then be prompted to either:

• Enter the code from your authenticator app
• Or use the code sent via email

3. You can switch between both options anytime via a link.
4. After entering a valid code, you'll be logged in.

Workspace-Wide MFA Activation

Admins can make 2-factor authentication mandatory for the entire workspace.

1. Go to Settings (gear icon in the bottom left of the main menu) > Workspace > Workspace section

2. Enable the toggle for Multi-Factor Authentication Required

When users log in next, everyone will need to provide a second factor (email code or authenticator app).

Users can adjust MFA settings in their profile but cannot disable it.

This applies to all workspaces linked to the user's awork account.