Overview
Multi-factor Authentication (MFA) describes a multi-step login process that requires the User to enter more information than just a password, such as a one-time code.
Users will have the option to mark their devices as trusted, which will exempt them from the MFA process for a specified grace period.
This article will walk through Convoso's MFA Login process, including Contact Emails and the Trusted Device option.
By June 30, 2025, MFA will be implemented for all users.
Please Note: These changes will not impact SSO customers.
Contents
Before You Begin
Convoso is committed to securing your Account(s) from threats like spam and fraud. As such, Convoso is enhancing the security of the platform, beginning with SMS-enabled Accounts and then extending to all Accounts.
- March 18, 2025: New User Accounts will be required to use Complex Passwords and change them every 60 days. (This will deploy to accounts incrementally throughout the month.)
- Starting March 31, 2025, SMS Accounts will require Multi-Factor Authentication (MFA). Each user must have a valid email for authentication.
- Starting May 16, 2025, Existing SMS Account Users will be required to update their passwords to meet new security standards and change them every 60 days.
-
By June 30, 2025, the following will be implemented for all users:
- Complex passwords
- Password rotation every 60 days
- Multi-factor Authentication
- Contact Email Validation
To learn more about these security updates, see Login Security Enhancements.
Multi-factor Authentication Process
1.) Enter your email and password.
2.) Click the Sign In button.
The system will send a verification code to your Contact Email.
- If you have not entered and verified a contact email address, then you may be taken through the Contact Email Validation process first.
Note: Users should refrain from using the plus symbol (+) in their Contact Email address, as it may prevent the authentication email from being sent.
3.) Locate your verification code email.
- This code will only be valid for 15 minutes.
- Check both your inbox and spam folders.
4.) Submit your verification code.
-
(A) Enter code: Enter the verification code here.
- If you cannot find the verification email, click the resend code link.
-
(B) Trust Device: Click this checkbox to mark your device as trusted for 30 days.
- This will apply a 30-day grace period from MFA to the device you are using to authenticate.
- If you log in using a different device, you will still need to follow the MFA process.
- The box needs to be checked before clicking Submit.
- (C) Submit: Click this button to submit your verification code.
Troubleshooting
If you are unable to access your verification code after sending it multiple times. You may need to contact your Admin to edit your Contact Email.
Admins can edit the Contact Email for any of their Account's Users by following the steps below.
1.) Open the Show Users page.
2.) Click the User's Name to open their settings.
3.) Enter the correct email address in the Contact Email field or clear the field.
4.) Click the Apply Changes button.
5.) Instruct your User to attempt their Login again. Depending on whether the Contact Email field has an address, they will either be sent a verification code or prompted to enter a Contact Email again.
- To learn more about adding and validating a Contact Email, see Contact Email Validation.
Please sign in and vote to let us know if you found this article helpful!
👇