MFA adds an extra layer of security to your account, making it more difficult for criminals to steal your private and personal information. While usernames and passwords are great, they can be subject to theft, or can be vulnerable to a brute force attack.
Orchestra offers three options for MFA:
- Google authenticator
- Mobile authentication
- Email authentication
When enabled, you'll either receive a unique security code via text or email to verify it's you trying to log in, or you'll have to enter a code from the Google authenticator app, depending on what form of MFA you select.
How to set up MFA?
To set up MFA, navigate to your Orchestra account page by clicking on your account icon at the top right of the page and selecting 'My account'.
Select 'Enable MFA' in the Multi-factor authentication box at the bottom of the page. You can select the method of authentication you'd like from the three options that appear.
If you select Google authenticator, you'll need to download the Google authenticator app on your mobile phone or tablet. Once it has installed, open the app and select the plus icon in the bottom right of the screen (iOS) or open the settings for the app and click "Add account" (Android), select 'Scan a QR code' and scan the QR code that is displayed on Orchestra. Once the QR code is scanned, enter the verification code generated by the app and select 'Update account details' below. If you cannot scan the QR code, select 'Can't scan it?' and follow the steps on the page.
If you select Mobile authentication, click the 'Send code to...' button to send the unique verification code to your mobile phone, enter this code in the box below and click 'Update account details'. You will now receive a text with a unique verification code whenever you log in to Orchestra.
If you select Email authentication, simply click 'Update account details' and your MFA has been set up. A unique verification code will now be sent to your email whenever you log in to Orchestra in the future.
There is also an option to generate Backup Codes. These are codes that will also work when prompted for your MFA verification code at login after setting up MFA. Store these in a secure location as they can be used to access your account.
When selecting 'Update account details' to set up any of the aforementioned MFA methods, you may be prompted to add a country-code to the phone number field in the contact details box at the top of the page. If so, simply click the dropdown to the left of your phone number and select the appropriate country code (i.e. New Zealand +64, Australia +61).
Changing your MFA method
You can change your MFA method at any point as long as you are logged in. To do this, simply navigate back to your account page, select a different MFA method, and follow the relevant steps described above.