📌 Required for Financials and Credit Card Authorizations: You'll need 2FA enabled to use the Financials module and Credit Card Authorizations in Safari Portal.
Two-factor authentication, or 2FA, adds an extra layer of protection to your Safari Portal login. It's one of the most recommended ways to protect any online account. Each time you log in, you'll enter your password and then confirm it's you with a six-digit code from your phone or with a passkey. Each user can set up 2FA in their own settings. Account Admins can also require 2FA for everyone on the account. In your Security settings, 2FA shows up as Authenticator app and Passkeys. Setting up either one turns on 2FA.
👉 Before you start: To use an authenticator app, you'll need one on your phone, like Google Authenticator, Microsoft Authenticator, or Duo Mobile.
You'll find 2FA in two places. The Personal tab is where you set up 2FA and passkeys for yourself. The Users tab is where Account Admins can require 2FA for the whole team.
Step-By-Step Instructions
Set Up 2FA for Yourself
Note: You won't see the word "2FA" in the Security section. Look for Authenticator app.
- Click your profile icon in the top right, then click Settings.
- Make sure you are inside the Personal tab.
- Scroll down to the Security section.
- Next to Authenticator app, click Set Up.
- If you don't have one yet, download a free authenticator app on your phone, like Google Authenticator, Microsoft Authenticator, or Duo Mobile.
- Open your authenticator app and scan the QR code in the Enable 2FA window.
- If Safari Portal asks for your password, enter it.
- Enter the six-digit code your app shows. Then click Verify Now.
- You will see Authenticator app is set up.
Disable 2FA
Note: If you also have a passkey, 2FA stays on after you remove the authenticator app.
Note: If an account you belong to requires 2FA and you don't have a passkey, you won't see Disable. You'll see "2FA is required by this account, so you can't turn it off." instead.
- Click your profile icon in the top right, then click Settings.
- Make sure you are inside the Personal tab.
- Scroll down to the Security section.
- Next to Authenticator app, click Disable.
- If Safari Portal asks for your password, enter it.
- Click Remove Authenticator App.
Use a Passkey for 2FA
Optional: You don't need a passkey to use 2FA. It's just another way to confirm it's you.
A passkey lets you confirm it's you with your fingerprint, face, or device PIN. Once you add a passkey, it works as your 2FA, even if you don't use an authenticator app. To add one, go to the Personal tab, scroll to Security, and click Add A Passkey next to Passkeys. For full steps, see How do I sign in with a passkey in Safari Portal?
If you have both a passkey and an authenticator app, you can choose Use a passkey or Use your authenticator app when you sign in.
Require 2FA for Your Team
📌 Account Admins only: Only Account Admins can require 2FA for all users. You'll also need 2FA on your own login before you can turn this on. If you don't have it yet, click Set up 2FA in that section.
- Click your profile icon in the top right, then click Settings.
- Click the Users tab.
- Scroll down to the Two-Factor Authentication section.
- Turn on the Require two-factor authentication for all users toggle.
- To see who has 2FA, check the 2FA column in the users list. It shows Enabled for anyone who has set it up.
What Your Team Sees at Login
Once you turn this on, anyone on your account who hasn't set up 2FA must do it the next time they log in. They can't use Safari Portal until they finish. Team members who already have an authenticator app or a passkey won't need to do anything.
When they try to log in, they will see the Enable 2FA window. They will also see a red message in the bottom right: "Two-factor authentication is required by this account. Set it up to continue."
To finish setup, they will:
- Download an authenticator app if they don't have one yet, like Google Authenticator, Microsoft Authenticator, or Duo Mobile.
- Scan the QR code with the app. If they can't scan it, they can click Copy next to the secret key and paste it into the app.
- Enter the six-digit code from the app and click Verify Now.
Tips & Tricks 💥
- Not sure if 2FA is on? Look at the Security section. If you see Disable next to Authenticator app, or a passkey under Passkeys, 2FA is on.
- Seeing "Error logging in with 2FA"? The code changes every 30 seconds. Wait for a new code and try again.
- After you set up 2FA, you'll need to sign in to the Safari Portal mobile app again.
- Lost your phone or passkey? An Account Admin can click Reset 2FA on your user in Settings. This removes your authenticator app and passkeys so you can set up 2FA again.
Keywords: 2FA, two-factor authentication, two-step verification, MFA, authenticator app, Google Authenticator, Microsoft Authenticator, Duo Mobile, QR code, six-digit code, verification code, set up 2FA, turn off 2FA, Remove Authenticator App, passkey, Reset 2FA, lost phone, require 2FA for all users, require 2FA for team, Users tab, Personal tab, Financials, Credit Card Authorizations, 2FA required