Workspace admins and owners can require every member of the workspace to enroll in multi-factor authentication before they can access Aracor.
Turn on the requirement
Open Settings > General.
Find the Multi-factor authentication section.
Select Require MFA for all workspace members.
The change applies immediately. There is no separate save step, and it can take a few minutes to reach every member in a large workspace.
If you do not see this section, you are not an admin or owner of the workspace. Ask an admin to make the change.
What members experience
Members are asked to set up MFA the next time they sign in, and they cannot reach Aracor until they finish enrolling. Enforcement is immediate: there is no grace period and no way to skip it.
They will need an app that generates time-based one-time codes (also called a TOTP app). A mobile authenticator app is strongly recommended over a browser extension or desktop app: a code tied to a phone stays available even if the computer is lost, stolen, or compromised.
Aracor shows a QR code to scan with the authenticator app (or a setup key to enter by hand), then asks for the code it generates to confirm. From then on, they confirm with a new code from the app whenever Aracor asks for one.
Authenticator apps
Any app that supports time-based one-time codes (TOTP) works. A few options:
1Password's mobile app, if the team already uses 1Password and wants to keep the code alongside other credentials
If someone belongs to more than one workspace
The requirement follows the person, not the workspace they happen to be working in. If someone belongs to at least one workspace that requires MFA, they must enroll, no matter which workspace they are using at the time.
For example: a person's firm workspace requires MFA, but a client workspace they also belong to doesn't. They still need to set up MFA, since sign-in isn't scoped to one workspace at a time.
The same logic applies when you turn the requirement off. MFA stops being mandatory for a member only if no other workspace they belong to still requires it.
Reset a lost MFA device
If you no longer have access to the device or app you enrolled, Aracor support can reset it for you.
Email [email protected].
Use the subject line [MFA] Reset MFA device.
In the email, include your name, your default workspace, and the email address registered with Aracor, if it's different from the one you're sending from.
Explain why you need the device reset.
A support engineer reviews the request and replies within 24 hours.