Two Factor Authentication

LaunchBay supports Two-Factor Authentication (2FA) as an additional layer of security for both your team and your clients. Team and client 2FA can be enabled independently of each other, giving you flexible control over your account's security requirements.

Team Two-Factor Authentication

Enabling 2FA for Your Team

Team admins can require all team members to use 2FA when logging in to LaunchBay. To enable it, go to Settings → Security and turn on Team MFA (“Require your team to use MFA”). You’ll need to set up MFA on your own account first.

Team members can also enable 2FA individually on their own accounts without an admin requirement. To do this, click your name in the bottom left corner of your account, select "Profile," and scroll to the Multifactor Authentication section. Click "Add Authenticator" and follow the prompts.

Setting Up an Authenticator App

An authenticator app on a separate device is required. Some popular options include Google Authenticator, Authy, and Bitwarden — any standard authenticator app will work.

When setting up 2FA, a QR code will appear on screen. Open your authenticator app, scan the code, and enter the verification code it generates to complete setup. Once configured, every login will require a code from the authenticator app.

Client Two-Factor Authentication

Requirements

Client 2FA requires Password-Protected Portals to be enabled first. Magic links are not compatible with client 2FA — when client 2FA is enabled, all magic links are disabled and clients will be directed to the password login page instead.

Enabling 2FA for Clients

To require MFA for all clients, go to Settings → Security and turn on Client MFA, which appears once Portal Passwords is on. You’ll need to set up MFA on your own account first.

How 2FA Works in LaunchBay

• Authenticator app only — LaunchBay does not send MFA codes via SMS or email. All 2FA codes are generated by an authenticator app on a separate device.
• Team 2FA is elective by default — team members set up 2FA on their own from their Profile settings. Admins can require it account-wide via Settings → Security, but it is not enforced automatically.
• Client 2FA is admin-enforced — when an admin enables client 2FA, clients will be prompted to set it up on their next login by scanning a QR code with their authenticator app.
• iPhone users — iOS may offer to save the 2FA code locally in the built-in Passwords app, which works the same as a third-party authenticator app.

Quick Reference