Set up your two-factor authentication (2FA)

Two-factor authentication (2FA) provides an added layer of security to ensure that only authorized users may see their portfolios and/or documents. Client Portal uses the Time-based One-Time Password Two-factor Authentication (TOTP 2FA) method rather than the less secure SMS-based authentication because TOTP 2FA is less susceptible to intercepts and phone number spoofing.

Download an authenticator app

Any authenticator app that supports TOTP can be used for passcode generation to access Client Portal. If using an authenticator app is new to you, we recommend you use one of the two commonly used authenticator apps which can be found in the app stores of your mobile device/desktop.

Authenticator Apps	Apple App Store	Google Play App Store
	‎Google Authenticator	Google Authenticator
	‎Microsoft Authenticator	Microsoft Authenticator

Set up your authenticator app

1. If you do not already have an authenticator app, you will need to install one to set up 2FA.

2. Follow the app’s setup instructions and provide the app with any required device permissions.

   • The links below are setup guides for our recommended authenticator apps:

     • Google Authenticator

     • Microsoft Authenticator

3. Use your existing account (e.g., Google or Microsoft account) to log into the app or create a new account to log into the app.

Once you have your authentication app installed on your mobile device/desktop and you are logged in to the app, you can proceed to add a passcode generation function specifically for Client Portal.

You will need:

• Client Portal sign-in page or user profile page

• Your mobile device with the authentication app ready

Set up two-factor authentication through your User Profile page

1. Sign in to Client Portal with your username and password.

2. Navigate to the dropdown menu on your sidebar next to your name and select User Profile.

3. Go to the Two-Factor Authentication (2FA) settings card.

4. By default, 2FA is set to Disabled. Toggle the Disabled button on the 2FA settings card.

5. Two Factor Authentication setup modal appears with a QR code.

6. Open your authenticator app (or download one if you do not have one), tap  “+”, “Add”, “Add account” or similar text.

7. The app will turn on your mobile device camera for you to scan the QR code. For help with getting the 6-digit verification code manually without the QR code scanning, click here.

8. The app will generate a 6-digit verification code for you to enter in the Code field on the Two Factor Authentication setup modal.

9. Click the Verify button and wait for the verification process to complete.

10. Once the verification process is complete, the modal will display the “Two-Factor Authentication has been enabled.” confirmation message.

11. The next time you log in to Client Portal, you will need your authenticator app to generate a 6-digit passcode to sign in to Client Portal.
    

Set up two-factor authentication through the sign-in page

If two-factor authentication is mandatory for your client portal, and you have not set up the two-factor authentication yet, please follow the instructions below.

1. Log in to Client Portal.

2. After you sign in successfully, you will be asked to set up the two-factor authentication.

3. The Two-Factor Authentication setup modal appears with a QR code.

4. On your authenticator app, tap  “+”, “Add”, “Add account” or similar text.

5. The app will turn on your mobile device camera for you to scan the QR code. For help with getting the 6-digit verification code manually without the QR code scanning, click here.

6. The app will generate a 6-digit verification code for you to enter in the Code field on the Two Factor Authentication setup modal.

7. Click the Verify button and wait for the verification process to complete.

8. Once the verification process is complete, the modal will display the “Two-Factor Authentication has been enabled.” confirmation message.

9. The next time you log in to Client Portal, you will need your authenticator app to generate a 6-digit passcode to enter in the Approval required screen to access Client Portal.
   

Change your two-factor authentication app

1. Sign in to Client Portal, navigate to the dropdown menu next to your name, and select User Profile.

2. Go to the Two-Factor Authentication (2FA) settings card

3. Click on the link “Change authenticator app”

4. The Approval required modal allows you to enter a 6-digit code to approve the change. Refer to your existing authenticator app for the code to enter here.

5. Enter the 6-digit code in the Code field and click the Verify button.

6. Change authenticator app modal appears with a QR code.

7. On your new authenticator app, tap  “+” or “Add”, “Add account” or similar text.

8. The app will turn on your mobile device camera for you to scan the QR code. For help with getting the 6-digit verification code manually without the QR code scanning, click here.

9. The app will generate a 6-digit verification code for you to enter in the Code field on the Change authenticator app modal.

10. Click the Verify button and wait for the verification process to complete.

11. Once the verification process is complete, the modal will display the “Your authenticator app has been changed successfully.” confirmation message.

12. The next time you sign in to Client Portal, you will use your new authenticator app to generate a 6-digit passcode for you to enter on the sign-in screen and access Client Portal.

Disable two-factor authentication

Note: You can only disable 2FA if you are an optional 2FA user with your Client Portal client portal.

1. Sign in to Client Portal, navigate to the dropdown menu next to your name, and select User Profile.

2. Go to the Two-Factor Authentication (2FA) settings card.

3. Click on the Enabled button.

4. The Approval required modal allows you to enter a 6-digit code to approve the change. Refer to your existing authenticator app for the code to enter here.

5. Enter the 6-digit code in the Code field and click the Verify button.

6. Click Disable button on the Disable Two-factor Authentication modal to confirm.

7. Once 2FA is disabled, a 2FA disabled successfully confirmation modal appears, and the Two-Factor Authentication settings is set to Disabled.
   

Get the 6-digit verification code manually

1. If you have trouble scanning the QR code with your mobile device during the setup of two-factor authentication or while changing your authenticator, there's an alternative method available to get the verification code.

2. On the Two-Factor Authentication setup or Change authenticator app modal, enter the Secret Key code into your authenticator app.

3. On your authenticator app:

* similar text or wording