Multi-Factor Authentication

MFA adds a second verification step to secure your account

Overview

Starting with Netmaker v1.0.0, Multi-Factor Authentication (MFA) is available to enhance account security. MFA adds a secondary verification step, helping prevent unauthorized access even if user credentials are exposed.

MFA is supported in both Community Edition (CE) and Pro, can be enforced globally by administrators, and is currently available only for on-premises deployments.

How MFA Works

When MFA is enabled, users must provide:

• Their username and password (first factor).
• A time-based one-time password (TOTP) code from an authenticator app.

After entering your credentials, you will be prompted for a 6-digit verification code from your authenticator app before gaining access.

Compatible Authenticators

Netmaker’s MFA uses the TOTP standard, meaning you can use any TOTP-compatible authenticator app, such as Google Authenticator, Authy, Microsoft Authenticator, or similar. If it supports TOTP, it will work with Netmaker.

Enabling MFA for Your Account

You can enable Multi-Factor Authentication (MFA) to add a second layer of security to your Netmaker account.

1

Open Account settings

In the Netmaker web UI, click on your profile icon in the lower-left corner and select Account from the menu.

2

Start setup

Click Enable MFA, then in the modal click Start setup and enter your password to continue.

3

Scan the QR code

A QR code will be displayed — scan this code using your preferred TOTP-compatible authenticator app.

4

Verify

Enter the 6-digit code from your authenticator app to verify, then click Done.

Global Enforcement

Administrators can require MFA for all users through global policy settings in the admin interface. Once enforced, users will be prompted to set up MFA at their next login.

To enable MFA enforcement, go to Settings > Security & Authentication, then switch on the Enforce Multi-factor Authentication toggle.

Logging in with MFA

After MFA is set up, the login process requires:

• Username & password
• TOTP verification code

If either factor is incorrect, access is denied.

Resetting MFA

1

Open Account settings

Log in with your MFA credentials. Click on your profile icon in the lower-left corner and select Account from the menu.

2

Reset MFA

Click Reset MFA.

3

Confirm

Confirm your password to complete the change.

Recovering Access

If you lose access to your authenticator app, you will need to contact your Netmaker super administrator for assistance. The super administrator can disable MFA for your account, allowing you to log in again and reconfigure MFA as needed. This prevents permanent lockouts and ensures you can securely restore access to your account.

FAQs

Can MFA be enforced organization-wide?

Yes — administrators can enforce MFA globally for all users.

Is SMS-based MFA supported?

No — only TOTP-based MFA is supported in this version for enhanced security.