Protect your account, your clients, and your business with secure login
Multi-factor authentication (MFA) is a critical part of your security posture. This guide walks you through what MFA is, how to set it up, how to use it daily, and what to do if something goes wrong — all aligned with FTC Safeguards, HIPAA, and SOC 2 requirements.
What MFA Is and Why It’s Required #
What is MFA? Multi-factor authentication (MFA) adds an extra layer of protection to your login process by requiring two types of verification:
- Something you know (your password)
- Something you have (like a mobile device or app)
You may be asked to approve a push notification, enter a code from your phone, or confirm your identity using an authenticator app.
Why MFA Matters
- Prevents unauthorized access, even if your password is compromised
- Protects your data, company systems, and client information
- Required for compliance with security frameworks like FTC Safeguards, HIPAA, and SOC 2
When you will use MFA
You’ll be prompted to complete MFA:
- The first time you log in
- When using a new device or location
- Periodically, as part of the security policy
🔐 MFA is included in all Guardian, Titan, and Overwatch service tiers. Need help activating it? Contact Support
How to Set Up MFA #
Steps to Set Up MFA:
- Open your onboarding email or IT instruction sheet
- Download an authenticator app (we recommend Microsoft Authenticator)
- Scan the QR code or enter the code manually into your app
- Verify the generated code when prompted
- Confirm registration — your MFA is now active!
Tips:
- Make sure your phone’s clock is set to auto-sync
- Use a strong cellular or Wi-Fi signal during setup
- If using SMS or voice call options, ensure the number is correct and current
How to Verify MFA on Login #
Once MFA is set up, you’ll complete a quick verification each time you log in — especially when using a new device, app, or location.
Typical MFA Verification Steps
- Enter your username and password as usual.
- Complete MFA challenge:
- If using an authenticator app → open the app and enter the current 6-digit code.
- If using push notifications → approve the login request on your phone.
- If using SMS → enter the verification code sent to your phone.
- Access granted: You’ll be logged in and redirected to your AVD workspace or app.
Tips for Smooth MFA Login
- Have your mobile phone or authenticator device nearby when logging in.
- Check that the time on your phone is accurate (auto-sync is recommended).
- Make sure your phone has an internet or cellular connection for push or SMS codes.
When MFA Will Re-Prompt
- First login on a new device
- After a password change
- Periodically, per company security policy
What to Do if MFA Fails (Lost Device, Reset Request) #
Even with MFA, sometimes things go wrong — here’s what to do if you’re locked out or having trouble.
Lost or Stolen Device #
- Notify your IT team immediately.
- Contact Office Heroes Support: 📧 clientcare@office-heroes.com | 📞 1-757-733-6272
- We will help reset your MFA settings and remove the lost device.
New Phone or Number #
- Install the authenticator app on your new phone.
- Contact support to re-register your MFA — we’ll guide you through resetting it.
MFA Code Not Working #
- Ensure your phone’s time is set automatically — wrong time = invalid codes.
- Check your internet/cellular connection.
- Try switching to a backup method (like SMS) if set up.
Locked Out of Account #
- Contact Office Heroes Support right away: 📧 clientcare@office-heroes.com | 📞 1-757-733-6272
- Provide your name, email, and a brief description of the issue.
Best Practice: Always keep at least two MFA methods (e.g., app + SMS) to avoid lockouts.
Need Help? #
If you’re still having trouble logging in:
📧 Email: [clientcare@office-heroes.com]
📞 Call: 1-757-733-6272
Include:
- Your full name and company
- Device type (Windows or Mac)
- Screenshot of the error (if possible)
- A brief description of the issue
Why Office Heroes? #
We deliver fully managed, secure cloud environments across all tiers:
- Guardian: Endpoint & user protection for small teams
- Titan: Advanced security, compliance alignment, and automation
- Overwatch: Continuous GRC monitoring and audit-ready reporting
💬 Want to learn how secure your current cloud setup is?