Enabling Two-Factor Authentication
How to log in with advanced security features.
Two-factor authentication (2FA)adds an extra layer of security by requiring two forms of verification before granting access. With single-factor authentication, typically a username and password, access depends entirely on those credentials remaining private. If they are compromised, an unauthorized user could gain full access to organizational data. Two-factor authentication reduces this risk by requiring verification through a trusted device.
Organizations that wish to opt in to 2FA should navigate to Settings > Organization Settings > Two Factor Authentication. From here, enable this setting and click Save Changes.
Install an Authenticator
Before logging in with two-factor authentication, ensure that an authenticator app is installed on your mobile device. Common options include, aren't limited to, Google Authenticator, Authy, or Microsoft Authenticator.
Scan QR Code
Once the authenticator app is installed, scan the QR code displayed on the screen to link your account. You only need to complete this step once to connect your login with the authenticator app.

After scanning the QR code, the app will display a six-digit One-Time Code. Enter this code to complete the setup process.
At the end of setup, you will be provided with a Recovery Code, which serves as a backup login method.
Store this code securely. It can be used to access your account if you no longer have access to your authenticator app.
Logging In With 2FA
After setup is complete, logging in requires two steps.
- Enter your normal username and password for iDonate.
-
When prompted, open your authenticator app, select your account, and enter the six-digit One-Time Code displayed.

Once verified, you will be logged in. If you are unable to use 2FA, select Try another method when prompted for the One-Time Code. You will be presented with the following options:
- Google Authenticator or similar: This is the standard 2FA login method described above.
- Recovery code: This utilizes the unique ID you were assigned after the initial connection described above.