To enable Two-Factor Authentication (2FA) on your CentralReach account:

1. Log in to CentralReach or navigate to the  Dashboard module and select Home
2. Click the My Profile tab on the top of My Dashboard
3. Click Login & Access
4. Click Set Up Two-Factor Authentication

5. Two options will expand, for you to set up 2FA via text messaging or via code generator:

1. To set up via text message (SMS):

• Enter your mobile phone number in the your cell # field and click Verify This Number
• You will receive a text message with a six digit verification code. It may take up to two minutes to receive the code. If you need a new code, click Resend Verification Code
• Enter the verification code, and click Verify Code

2. To set up via a code generator app (CR Recommended):

• Users need to have a valid email address added the the “Basics” section of their profile.
• Install a code generator app on your mobile device
• Click the Set up a Code Generator App link
• Open the code generator app, and scan the bar code displayed or enter the Secret Key below the bar code
• Enter the Verification Key provided by the code generator app, and click Confirm

6. Click Update Login Information

Click here to learn more about 2FA.

Click here to learn how to log in to CentralReach after configuring 2FA on your account.

Once you enable Two-Factor Authentication (2FA) in your CentralReach account, you will be prompted to enter a verification code every time you log in to your account.

To log in to CentralReach after setting up 2FA:

1. Go to members.CentralReach.com
2. Enter your username and password and click Login to CentralReach
   • If you have 2FA set up via text message, a code will be sent vis SMS
   • If you have 2FA set up via a code generator app, open the app to retrieve the code
3. Enter the 6 digit verification code

4. Click Login Securely

5. If the code expired while you are logging in, go back to the login page and enter your credentials again to receive a new code

6. If you lost your phone and are unable to log into your account, contact your organization to request 2FA to be disable.

Click here to learn how to disable 2FA.

To change your Two-Factor Authentication (2FA) mobile phone number or the authentication app you use for 2FA:

1. Log in to CentralReach or navigate to the  Dashboard module and select Home
2. Click the My Profile tab on the top of the page
3. Click Login & Access
4. Click the Two Factor Authentication button

5. Two options will expand, for you to update your 2FA set up:

1. To update your phone number or change from a code generator app to text message authentication (SMS):

• Enter a new mobile phone number in the your cell # field and click Verify This Number
  • If you currently have 2FA set up via code generator app, confirm you want to change your existing 2FA, by clicking Yes on the confirmation pop-up

• You will receive a text message with a six digit verification code. It may take up to two minutes to receive the code. If you need a new code, click Resend Verification Code
• Enter the verification code, and click Verify Code

2. To change your code generator app or change from text message authentication to a code generator app (CR Recommended):

• Install a code generator app on your mobile device
• Click the Set up a Code Generator App link
• Confirm you want to change your existing 2FA, by clicking Yes on the confirmation pop-up

• Open the code generator app and scan the bar code displayed, or enter the Secret Key below the bar code
• Enter the Verification Key provided by the code generator app and click Confirm

6. Click Update Login Information

To disable Two-Factor Authentication (2FA) on your CentralReach account:

1. Log in to CentralReach or navigate to the  Dashboard module and select Home
2. Click the My Profile tab on the top of the page
3. Click Login & Access
4. Click the Two Factor Authentication button

5. Click Remove Two-Factor Authentication

6. Confirm you want to remove Two-Factor Authentication by clicking Yes on the confirmation pop-up

Click here to learn how to disable 2FA for an employee in your organization.

If an employee lost their mobile device and has Two-Factor Authentication (2FA) enabled, they cannot log in to CentralReach. Only the Org Account can disable 2FA for the employee to log in to CentralReach.

To disable 2FA for an employee:

1. Navigate to the Contacts module and select Employees & Co-Workers
2. Search for the employee or click the employee’s name in the grid
3. Click the Profile tab on the top of the page
4. Click Login & Access
5. Click the Two Factor Authentication button

6. Click Remove Two-Factor Authentication

7. Confirm you want to remove Two-Factor Authentication, by clicking Yes on the confirmation pop-up

Click here to learn how to view the organization’s employees that have 2FA enable.

To view if your employees have enabled Two-Factor Authentication (2FA) in their CentralReach account:

1. Navigate to the  Contacts module and select Employees & Co-Workers
2. Click the funnel icon on the top left-hand side of the page, if the section is not already expanded on your screen
3. Click the Filters tab
4. Click  Profile/Setup
5. Go to Two-Factor Authentication:
   • Click Yes to add a filter and show all users who have 2FA enabled
   • Click No to to add a filter and show all users who have 2FA disabled

To check if an employee has 2FA enabled:

1. Navigate to the Contacts module and select Employees & Co-Workers
2. Click the employee name on the contacts grid
3. Click the Profile tab
4. Click Login & Access and view the button next to Two-factor Authentication:
   • If the employee has a Set Up Two-Factor Authentication, it means the employee has 2FA disabled
   • If the employee has Using Texts/Authenticator App, Click to Change, it means the employee has 2FA enabled

Click here to learn more about 2FA.