Enrolling in Multi-Factor Authentication (MFA)

Multi-factor authentication (MFA) provides an extra layer of security for your Iterable login. MFA makes it harder for unauthorized users to access your account, even if they know your password.

All Iterable members who log in with a username and password are required to register an authentication factor and log in using MFA.

When you log in to Iterable, you'll be prompted to enter an authentication code from your authenticator app or security key. If you haven't enrolled in MFA, you'll be redirected to the MFA setup page.

MFA is required every time you log in, so make sure to have your authentication factor ready when you access Iterable.

Continue reading for instructions to enable MFA and to register.

# In this article

# Getting started

Before you can log in and set up MFA, you need to have an authentication factor ready. Iterable supports two types of authentication factors for MFA registration:

• An authenticator app (either on your mobile device, browser extension, or others) that provides one-time passwords (OTP). Examples include:
  • Google Authenticator
  • Microsoft Authenticator
  • Authy
  • 1Password
  • LastPass
  • Bitwarden
• A security key such as a YubiKey or a Titan Security Key (Webauthn with security keys).

Once you have registered for MFA, you can optionally enroll in biometric authentication for passwordless access when you log in from a recognized device. Biometric authentication, known more formally as Webauthn with device biometrics, uses Touch ID, Face ID, or other device biometrics, to identify you without a password using your physical characteristics.

# Registering for MFA

Iterable prompts users to enroll in MFA when logging in for the first time, or whenever MFA has been reset for your account.

To set up MFA:

1. Go to Iterable's login page and enter your email address. Click Continue.

2. Enter your password and click Continue.

3. Select the MFA method you plan to use:

   • Google Authenticator or Similar: Use an authenticator app for one-time codes. See Authenticator app setup for instructions.

   • Security Key: Use a physical security key or digital passkey. See Security key setup for instructions.

     

# Authenticator app setup

To register an authenticator app for MFA:

1. Choose Authenticator App on the MFA setup page.

2. When prompted, scan the QR code with your authenticator app.

   This QR code provides the app with the information to generate one-time codes for your account in the future.

   

   If you don't have the ability to scan the QR code, click Trouble Scanning. Iterable provides a one-time code that you can manually enter in your authentication app instead.

   

3. Find Iterable in your authenticator app and its associated one-time code. Keep this code in front of you—they expire after a period of time, and the code can quickly change.

4. Go back to Iterable's MFA registration page, enter the one-time code, then click Continue.

5. Save the recovery codes so you can access your account if you lose your device with the authenticator app, then check the box to confirm you've saved them.

   

6. Click Continue to finish.

Your registration is now complete!

# Logging in with an authenticator app

To log in using an authenticator app:

1. Go to Iterable's login page.

2. Enter your email and click Continue.

3. Enter your password and click Continue.

4. Open your authenticator app and find the one-time code for Iterable.

5. Enter the one-time code from your authenticator app before the code expires.

   

# Security key setup

To register a security key or passkey for MFA:

1. Click Security Key on the MFA setup page.

2. Prepare your security key for registration:

   • For a physical security key, insert the key into your device.
   • For a digital security key, log in to the app or service that provides the key.

3. When your security key is ready, click Use Security Key.

   

4. Follow the on-screen instructions to register your security key or passkey. Registration steps vary depending on your browser, operating system, and type of key.

5. After you've registered your security key, enter a name for your key and click Save.

   

6. Iterable confirms that your security key is registered. Click Continue to finish the setup process.

   

7. Save your recovery codes so you can access your account if you lose your physical security key or digital passkey.

   

8. Save these codes in a secure place, then check the box to confirm you've saved them. Click Continue to finish.

Your registration is now complete!

# Logging in with a security key

To log in using a security key:

1. Insert your security key into your device, or log in to your digital passkey app, depending on the type of key you're using.
2. Go to Iterable's login page.
3. Enter your email address and click Continue.
4. Enter your password and click Continue.
5. Follow the on-screen instructions to activate your security key.

# MFA with biometric authentication

Once you've finished enrolling in MFA, Iterable will offer biometric authentication. This enables passwordless login using biometric scans such as Touch ID or Face ID.

Biometric authentication is optional, and is registered to the local device you're using.

When you register for biometric authentication, you are not required to use it. If you're unable to use biometric authentication, you can bypass it and log in using your password.

# Requirements for biometric authentication

To use biometric authentication, you must have the following enabled:

• A device with biometrics, such as Touch ID or Face ID.
• A browser and operating system that supports WebAuthn and has biometric authentication.
• JavaScript.

For more information about the supported systems for Webauthn biometrics, read Browser Support for WebAuthn.

# Enrolling in biometric authentication

To enroll in biometric authentication:

1. Go to Iterable's login page, enter your email and click Continue.

2. Enter your password and click Continue.

3. Provide your MFA authentication.

4. In the prompt to Log in Faster on This Device, click one of the following options:

   • Continue to proceed with biometric factor enrollment.

   • Remind me later to skip enrollment now. Iterable will ask again in two weeks.

   • Not on this device to stop enrollment prompts. This is valid for one year, or as long as the cookies are stored in your browser.

     

5. When you click Continue, follow the on-screen instructions to enable biometric authentication on your device.

6. When finished, you'll see a confirmation message.

   

# Logging in with biometric authentication

To log in using biometric authentication:

1. Go to Iterable's login page.

2. Enter your email and click Continue.

3. When prompted to Use fingerprint or face recognition to log in, click Continue.

4. Follow your device's on-screen instructions to authenticate using your biometric method.

5. In the Verify Your Identity prompt, enter your MFA authentication:

   • Authenticator app: Enter the one-time code, then click Continue before the code expires.

   • Security key: Insert the key into your device or log in to your digital passkey app, then click Use security key.

# Logging in without biometric authentication

To bypass biometric authentication and log in using your password and MFA factor:

1. Go to Iterable's login page.

2. Enter your email and click Continue.

3. When prompted to Use fingerprint or face recognition to log in, click Use password.

4. Enter your password and click Continue.

5. When prompted to Use fingerprint or face recognition to log in, click Try another method.

# Resetting MFA or registering a new factor

To reset your MFA or register a new device or security key, contact your Iterable org administrator or a member with the Manage Members org permission. They can reset your MFA enrollment by following these instructions: Resetting MFA for a member.