MFA adds an extra layer of security by requiring a second verification step beyond your password. It is mandatory for all Tazapay accounts at login and during high-risk actions.

Setup

1. On login, you’ll be prompted to set up MFA.
2. Choose a method: Passkey (recommended), SMS code, or Authenticator App (TOTP).
3. Complete Verification.
4. Save your recovery codes securely for backup access.

You can also configure MFA in Settings > Security > Multi-Factor Authentication.

MFA methods

• Passkey (Recommended) - Uses Face ID, fingerprint, or device lock.
• SMS Code - Receive a 6-digit code via text. Ensure your phone number is up to date.
• Authenticator App (TOTP) - Works offline with apps like Google Authenticator, 1Password, or Authy. Generates a new 6-digit code every 30s.
• Recovery Codes - One-time use backup codes provided during setup. Store offline in a secure location.

Managing MFA

From Settings > Security > MFA, you can:

• Add/remove passkeys
• Update your SMS number
• Replace your authenticator app
• Change your default method
• View or regenerate recovery codes

Best Practices

• Enable at least two MFA methods to prevent lockout.
• Store recovery codes securely and offline.
• Prefer Passkeys for best balance of security and convenience.
• Use role-based access: add teammates via Settings > Manage team > Invite Teammate so each user has independent MFA.

Support

If you lose access to all MFA methods and recovery codes, contact [email protected]. Identity verification will be required.