Skip to content
Contact us
  • There are no suggestions because the search field is empty.

How to set up and use multi-factor authentication (MFA) in Trace

What is MFA?

Multi-factor authentication (MFA) adds an extra layer of security to your account. As well as your password, you enter a 6-digit code from an authenticator app on your phone. Even if someone learns your password, they can't get in without your phone.

Trace works with any authenticator app, such as Google Authenticator or Microsoft Authenticator.

Setting up MFA

  1. Look for the warning badge. If MFA isn't turned on, you'll see a small ! on your account menu (top right) and the message MFA is not enabled.
  2. Open your account. Click your account menu and select My account.
  3. Go to the Multi-factor authentication tab. You'll see the Authenticator app card.
  4. Scan the QR code. On your phone, open your authenticator app, choose the option to add an account (usually a + button), then scan the QR code shown in Trace.
  5. Enter the code. Type the 6-digit code your app now shows for Trace into the 6-digit code box and click Verify.

That's it. MFA is now on: the Authenticator app card shows On, and the ! warning disappears.

Signing in with MFA

  1. Sign in with your email and password as usual and click Enter.
  2. You'll see the MFA Code screen. Open your authenticator app, type the current 6-digit code for Trace into the Code box and click Verify. Codes change every 30 seconds, so if one is rejected, wait for the next one.
  3. Remember this device (optional). On the MFA Code screen you can also tick Remember this device (before clicking Verify) so you won't be asked for a code on this browser again. You'll be asked again if you use another device or browser, or clear your browser's cookies.

Changing to a new phone or app

Open My account → Multi-factor authentication and click Change app. Scan the new QR code with the app on your new phone, type its 6-digit code and click Verify. Your old app keeps working until the new one is verified, so you can't lock yourself out halfway through.

Forgetting a remembered device

If you ticked Remember this device on a shared or old computer, sign in on that browser, open My account → Multi-factor authentication, and under This device is trusted click Forget this device. You'll be asked for a code next time you sign in there.

Turning MFA off

Open My account → Multi-factor authentication and click Remove. We strongly recommend keeping MFA on.

If your company requires MFA, the Remove button isn't shown. You can change your app but not turn MFA off.

Requiring MFA for your whole company

MFA can be made mandatory for everyone in your company who signs in with an email and password. Contact us to have it switched on. Once it's on, anyone without MFA is asked to set it up the next time they sign in.

Good to know

  • Signing in with Microsoft or Google? You won't be asked for a Trace MFA code. Your organisation's own Microsoft or Google security settings apply instead.
  • No backup codes. Trace doesn't offer backup codes, so keep your authenticator app safe. Some apps can back up to the cloud.
  • Lost your phone? Contact Trace support and we'll help you get back in.