Enhancing Your Account Security with Multi-Factor Authentication

We encourage all providers to enable multi-factor authentication to help ensure your account is secured. Unauthorized access to your account may occur if MFA is not enabled.

Important Notice for New Providers: Starting October 20, 2025, Multi-Factor Authentication (MFA) is required for all newly onboarding providers upon their first successful login.

What is Multi-Factor Authentication?

Multi-Factor Authentication (MFA) adds an extra layer of security by requiring you to verify your identity through multiple authentication methods, making it significantly more difficult for unauthorized users to gain access to your account.

Why Enable Multi-Factor Authentication?

  • Enhanced Security: MFA significantly reduces the risk of unauthorized access to your account, as it requires something you know (e.g., a password) and something you have (e.g., a mobile device).
  • Peace of Mind: With MFA enabled, you can rest assured that your personal and sensitive information is well-protected, even if your password is compromised.
  • Simple Setup: Enabling MFA is a straightforward process, and we're here to guide you through it every step of the way.

Video Walkthrough

Note: The above video will walk you through how to enroll in Multi-Factor Authentication via the SMS method. 

How to Turn on Multi-Factor Authentication

There are two ways to set up MFA: Mandatory Enrollment (for new accounts) and Optional Enrollment (to manage or switch methods later).

Path 1: Mandatory Enrollment for New Accounts (Required)

If your account was created on or after October 20, 2025, you will be required to enroll immediately after you set your password and log in for the first time.

  • After entering your password, you will be redirected to the Multi-Factor Authentication Setup screen.
  • Choose your preferred method: Text Messaging or Code Generator App.
  • By default, the screen will suggest Text Messaging (SMS).
    • Important Note on Phone Number: The system automatically uses the phone number you provided during the onboarding process. For the Text Messaging (SMS) option to work, this number must be a cell phone capable of receiving text messages. If this number is a landline or incorrect, you must select the Code Generator App instead, or contact your Account Executive (AE) immediately to update your primary contact number.

Path 2: Optional Enrollment (Existing Providers)

You can enroll or manage your MFA settings at any time by following these steps:

  • Log in to the Alma portal and go to Account Settings under your profile picture in the top right corner.
  • Navigate to Security on the left side menu.
  • Select either Use Code Generator or Use Text Messaging as your authentication method.
    • Note that you’ll be required to enter a new code each time you login to the Alma portal, so please select the authentication method that’s most convenient for you.

To use a code generator,

  • You’ll need to install a code generator app. We recommend Google Authenticator (click here for Android; click here for iOS).
  • Follow the instructions in the app
  • Type the six-digit code that it generates into the Alma portal
  • Press Submit

To use a text message,

  • We recommend confirming that the phone number listed under Account Settings > Personal Info is up to date. 
    • We’ll automatically send a text message to this number with a six-digit verification code, within 1-2 minutes
  • Type the code you receive into the Alma portal
  • Press Submit

You'll see a message within the Alma portal confirming that multi-factor authentication has been enabled. You’ll also receive a confirmation via email.

Troubleshooting FAQs

How can I review and/or edit the email address and phone number registered with my account?

To update your phone number or email address in the Alma portal:

  1. Log in to the Alma portal and go to Account settings under your profile picture in the top right corner.
  2. Edit either your phone number or email address in the Personal info page, and then select Save changes. (If you are enrolled in SMS MFA and update your phone number, the system will ask you to confirm the new number can receive texts and automatically transfer your MFA to the new number.)
  3. Note for SMS MFA Users: If you are already enrolled in SMS Multi-Factor Authentication and update your phone number, the system will prompt you with a "Confirm new phone number" message. You will then receive an MFA code at the new number to verify it can receive text messages. Once confirmed, the new number will be used for all future MFA logins.

Can I change the way I receive MFA codes if I already set it up?

Yes, you can switch the way you receive multi-factor authentication codes (to either SMS or a code generator app). To do so:

  1. Log in to the Alma portal and go to Account settings under your profile picture in the top right corner.
  2. Navigate to Security on the left side menu.
  3. Select Reset multi-factor authentication. Note: You will receive an email that confirms MFA has been deactivated for your account.
  4. Follow the setup instructions above to re-enroll using your preferred method.

How often do I have to enter an MFA code? Do I have to do it every time I log in?

You will be prompted to enter an MFA code each time you log in to the Alma portal. However, each successful login allows you to access the portal for 5 days without being prompted to log in again. This means you will need to complete the MFA login process approximately 6 times per month to maintain continuous access.

What do I do if I accidentally enter the wrong MFA code?

If you entered the wrong MFA code you will see a “Code is not valid. Try again, or view troubleshooting tips” message.

  • If you are using a code generator app, the app should refresh automatically to show you a new code that you can enter to login.
  • If you are opted in to SMS alerts, you will automatically receive a new text message with an updated MFA code. You can enter that new code to log in.

What do I do if it’s been more than 3 minutes and I still haven’t received my MFA code via SMS?

If you’ve confirmed that the phone number registered with your account is accurate and you are not receiving your MFA codes via text, please reach out to our team by clicking the Help button in the bottom right corner of the Support Center.

Need Assistance? 

If you lose access to your phone and/or authenticator app, if you run into any difficulties, or have questions while enabling Multi-Factor Authentication, our dedicated support team is available to assist you. Please reach out to us by clicking the Help button in the bottom right corner of the Support Center.

Was this article helpful?

5 out of 7 found this helpful

Have more questions? Submit a request