How to set up and use MFA for your NordPass Business user account

Introduction

Multi-factor authentication (MFA) protects your NordPass Business account with an extra step after your account password or SSO, before entering the Master Password. Your employer chooses which option(s) you must use. You may see Policy enforced by your organization in your vault settings. NordPass offers two options: 

  • Authenticator app - a mobile app that gives a 6-digit code.
  • Security key - a phishing-resistant physical device (e.g., YubiKey) you tap or insert when prompted.

 

This guide will explain how to set up multi-factor authentication (MFA) if it is mandatory in your organization.

 

Before you start

NordPass may require MFA setup:

  • At the initial NordPass signup
  • When the administrator changes the MFA policy
  • When you enable MFA in your vault settings
  • After the lockout and the administrator resets your MFA

 

Here's what to do

How to set up MFA during login

If your organization requires:

  • Security key and Authenticator app - Add your security key (give it a name), optionally add a second key, and set up the Authenticator app with the QR code.
  • Security key only - Add your key; NordPass may suggest a second key. If you only add one key, download your backup codes and keep them safe.
  • Authenticator app only - Scan the QR code, enter the code from the app, and download your backup codes.

 

Afterward, continue with your Master password as usual.

Note: If both methods are required, backup codes are not shown during setup. You can get them later in the "Settings".

 

How to change MFA methods in your vault settings

  1. Log in to the NordPass Business admin panel.
  2. Select the "Authentication" button located on the left side, and click on the "Multi-factor authentication" button.
  3. Next, tap the "Set up" button next to the method you want to add.
  4. To add or remove an MFA method, NordPass emails you a short code first - enter it and click on the "Verify" button.
  5. After this screen, you can rename or remove a key, remove the Authenticator app, or open the "Show Backup Codes" option.

    Note: If your organization made any MFA method mandatory, you may not be able to remove your last security key. In that case, contact your Admin for help. 

 

How to log in with MFA

Here's the sequence during the login process when MFA is required:

  1. Enter your NordPass Business password or use your company sign-in.
  2. Complete the MFA step on the screen - usually your security key or Authenticator app code.
  3. Next, enter your Master Password.
  4. If you are unable to log in, click on the "Use Another Method" button and try your Authenticator app or a backup code.
  5. However, if you are still stuck, contact your NordPass Admin, IT team, or read how to recover your lost MFA.

 

Additional Tips

  • Save backup codes somewhere safe (not only on your phone). Each code works once.
  • Two keys are better than one if your company uses security keys - keep a spare. 
  • No security key yet? Ask IT for one before you can finish setup.

Was this article helpful?