How to Set Up MFA on safedrop

What is it?

Multi-Factor Authentication (MFA) adds an extra layer of protection to user logins.

What are my options?

You can require MFA using:

SMS code
TOTP apps (like Google Authenticator)

How to enable it:

For Admins

Go to your safedrop Admin Panel

Head to Authentication Settings

Under the MFA section, choose one of the following:
Off – no MFA required
Only for email/password – good if you use Azure or Google login
Always enforced – all users must use MFA, even with SSO

Click Save

That’s it. Users will be prompted to set up MFA the next time they log in.

For Users

Once MFA is enabled, you’ll be asked to set it up during your next login.
Choose your preferred method:

Option 1: SMS

Enter your mobile number
Enter the 6-digit code you receive via text
Done

Option 2: TOTP (e.g. Google Authenticator)

Scan the QR code with your authenticator app
Enter the 6-digit code from the app
That’s it

You’ll use the same method every time you log in.

Tip: Users on Azure or Google login won’t be asked again if you select the “Only for email/password” setting.

Updated on: 20/05/2025