How to Enable Multi-Factor Authentication (MFA) in Simplify

Modified on Tue, Aug 25 at 4:36 PM

Overview

Multi-Factor Authentication (MFA) adds an extra layer of security to your Simplify account by requiring a one-time verification code in addition to your password each time you sign in. This article walks you through enabling MFA on your account.

Steps to Enable MFA

Open your account menu. In the upper right corner of the screen, click your name/profile icon.
Select Settings. From the dropdown menu, choose Settings to open your account settings.
Go to the Profile tab. The Profile tab is selected by default and displays your account details (Email, Display Name, ECGrid API Key, and Program Tier).
Locate Two-Factor Authentication. Scroll down below your profile details to the Two-Factor Authentication (Email OTP) section.
Enable the toggle. Click the toggle switch next to "Two-Factor Authentication (Email OTP)" to turn it on.
Confirm. Once enabled, every sign-in will require a 6-digit one-time code sent to your registered email address.

What to Expect After Enabling MFA

On your next sign-in, after entering your password, you'll be prompted to enter a 6-digit code.
The code is sent to the email address listed on your Profile page — make sure this email address is current and accessible before enabling MFA.
Each code is valid for a limited time. If it expires before you enter it, you can request a new one from the sign-in screen.

Troubleshooting

I didn't receive my code. Check your spam/junk folder. If it still hasn't arrived after a minute, use the "resend code" option on the sign-in screen.

I need to change the email address MFA codes are sent to. Update the Email field on the Profile tab (Settings > Profile) and save your changes before your next sign-in.

I'm locked out and can't complete MFA. Contact Simplify Support for assistance regaining access to your account.

Why We Recommend Enabling MFA

Enabling MFA significantly reduces the risk of unauthorized access to your account, even if your password is ever compromised. It's one of the simplest, most effective steps you can take to protect your data.