MFA and account security

Set up authenticator-app MFA, manage passwords and follow practical account security steps.

Use account security settings to protect your Enviro-D login.

Set up MFA

Enviro-D supports authenticator-app MFA using a time-based one-time code.

To set it up:

Open your profile or account settings.
Find the Multi-Factor Authentication section.
Add a new factor.
Give the factor a clear name, such as your phone name or authenticator app.
Scan the QR code with your authenticator app.
Enter the six-digit code to verify the factor.

After enrolment, the app refreshes your session so the new MFA factor is active.

Manage MFA factors

The MFA list shows existing factors, including their name, type and status. You can remove a factor after confirming the action.

Do not remove your only working factor unless you are sure you can still access your account.

Change your password

Password updates are available when password sign-in is enabled for your account. The password form requires a new password and a repeated password. The app enforces a minimum length and may require reauthentication for sensitive changes.

Use a password manager and avoid reusing a password from another service.

Your profile can also show linked sign-in methods where those features are enabled. Keep only the methods you recognise.

Security checklist

Turn on MFA for every user who can access client or portfolio work.
Use a unique password.
Remove users who no longer need access.
Remove stale invitations.
Check the team before confirming destructive actions.
Treat ownership transfer, team deletion, personal account deletion and leaving a team as high-impact actions.

Enviro-D does not currently show an active device/session list in the inspected settings screens, so do not rely on the app for device revocation workflows.