Does ContactOut support Multi-Factor-Authentication (MFA)

Multi-factor authentication, also known as MFA or two-factor authentication (2FA), is a method of verifying a user's identity by requiring them to provide multiple pieces of evidence or factors. Instead of relying solely on a username and password, MFA adds an extra layer of security by incorporating additional factors such as something the user knows (password), something the user has (a smartphone or physical token), and something the user is (biometric data like fingerprint or facial recognition).

To authenticate using MFA, a user typically needs to provide their username and password as the first factor. After that, they have to provide a second piece of evidence, which could be a temporary passcode generated by an authentication app, a text message with a one-time code, or a fingerprint or face scan. By requiring multiple factors, MFA significantly increases the security of user accounts and helps prevent unauthorized access, even if one of the factors is compromised.

ContactOut currently does not require MFA because we log sessions and IP addresses and do not support multiple active sessions. When ContactOut detects that there is a new active sessions from an unrecognised IP, it will prompt the user to check their email to authorise the session and log out of the old one.