Skip to main content

California – Setting Up Two-Factor Authentication (2FA) for CDTFA

Updated over 2 weeks ago

📌 Overview

This article walks you through how to log into California Department of Tax and Fee Administration (CDTFA) website and update your Two-Factor Authentication (2FA) settings. Adding Kintsugi’s secure group email allows us to access your California tax registration directly—no phone calls or back-and-forth codes needed.


✅ What You’ll Need

  1. Access to the CDTFA portal

  2. Your CDTFA login credentials (username & password)

  3. Kintsugi Mail's Virtual Mail Group ID
    [Go to Configuration > Kintsugi Mail > Virtual Mail Group > Group ID)

  4. Just 5–7 minutes of your time


🔐 Step-by-Step Instructions

  1. Log into the CDTFA portal

    1. Input your credentials then click “Log In”.

    2. If prompted with “Confirm Identification”, click “Send Authentication Email” button to receive the authentication code to the email address indicated below that button.

    3. Enter the authentication code sent through your registered email and choose “YES “ to Trust This Browser — this helps avoid repeated 2FA prompts during the process, then click “Logon”.

  2. Navigate to your Security settings

    1. Once logged in, click on the “Settings” in the top-right corner.

    2. In the Settings menu, navigate to the Profile tab. Within the Profile tab, select “Secondary Logons”.

  3. Update your Two-Factor Authentication (2FA) method

    1. On the Secondary Logons page, click “Add” button to add access.

    2. Access the Virtual Mail Group (VMG) ID within the Kintsugi app.
      Navigate to: Configuration > Kintsugi Mail > Virtual Mail Group > Group ID

      Copy the VMG ID:

      ⚠️ IMPORTANT: Please make sure to add your personal or work email in the Virtual Mail Group. This is to ensure you continuously receive important updates and messages from state portals. Check out this help article on How to Manage Your Virtual Mail Group in the Kintsugi Platform to learn more.

    3. Simply paste the Virtual Group Mail ID you copied from the Kintsugi platform into the designated fields below. After entering the required information, click "Next"

    4. On the “Grant Access to Accounts” page, click “Submit” to save the changes.

  4. Verify the change

    • A verification code will be sent to the email address you linked to Kintsugi’s Virtual Mail Group (VMG)

    • Copy the verification code that was sent to the email—the one you added or connected in the Virtual Mail Group. Then, paste it into the website or portal to verify and complete the 2FA setup.

    Once verified, your account is now connected, and Kintsugi can access it as needed.


Need more information? You can check this help article: FAQs - 2FA and State Portal Access

For further concerns, we're always here to help. If you can't find the answer you're looking for, please reach out to us using the chat bubble in the bottom right corner.

Did this answer your question?