Skip to main content

How to enable or disable Two-Factor Authentication

Updated

Overview

Two-Factor Authentication (2FA) adds an extra layer of security to your INGOT account by requiring a one-time verification code in addition to your password when logging in.

INGOT supports four 2FA methods: Email (default), SMS, Authenticator App, and Passkey. You can enable, change, or disable your 2FA method from the Client Portal Security Settings.

 

Step-by-step instructions

To enable, change, or disable 2FA:

Enabling 2FA

  1. Log in to your Client Portal.
  2. Go to Security Settings.
  3. Select your preferred 2FA method: Email, SMS, Authenticator App, or Passkey.
  4. Follow the on-screen verification for the chosen method.
  5. Confirm activation. From the next login onward, you will need both your password and the 2FA verification.

Changing your 2FA method

  1. Log in to your Client Portal.
  2. Go to Security Settings.
  3. Select Change Method.
  4. Choose the new 2FA method and follow the verification steps.
  5. Confirm. The new method will replace the old one on your next login.

Disabling 2FA

  1. Log in to your Client Portal.
  2. Go to Security Settings.
  3. Select Disable.
  4. You may be asked to verify your identity before the change is applied.
  5. Confirm. Your account will no longer require 2FA at login (not recommended for security).

Troubleshooting

  • You are not receiving the email 2FA code

    • Check spam or junk folder. Confirm the email on file is accessible. Wait up to one minute and request a new code if needed.

  • You are not receiving the SMS code

    • Check mobile signal and confirm the number on file is current. SMS may be delayed by your carrier — wait a couple of minutes before requesting another code.

  • Your Authenticator App code keeps failing

    • Authenticator codes are time-based. Set your device clock to Automatic. Codes refresh every 30 seconds — make sure you enter a fresh one.

  • Your Passkey is not working

    • Passkeys are tied to the specific device on which they were set up. Use the original device, or contact Customer Experience to reset your 2FA method.

  • You lost the device with your authenticator app or passkey

    • Contact Customer Experience. We can reset your 2FA method after verifying your identity — have a clear photo of your government-issued ID (front and back) and a selfie of you holding it ready.

Frequently asked questions

Q: Which 2FA method is most secure?

A: Authenticator App and Passkey are generally considered the most secure, as they do not depend on email or SMS delivery. Passkey is the most modern option but requires a compatible device.

Q: Can I have more than one 2FA method enabled?

A: Currently, one method can be active at a time. We recommend choosing the most secure option compatible with your devices.

Q: Will 2FA slow down my login?

A: It adds a few seconds for the verification code, but significantly increases your account security.

Q: Will INGOT staff ever ask for my 2FA code?

A: Never. We will never ask you to read back or share any verification code. Treat any such request as a potential phishing attempt.

 

Related articles

  • How to reset your Client Portal password
  • What to do if you do not receive login emails
  • Common login and authentication errors
  • Troubleshooting Client Portal login issues