MFA adds an extra layer of security to your account beyond your password, making it more difficult for criminals to steal your private and personal information. While usernames and passwords are great, they can be subject to theft, or can be vulnerable to a brute force attack.

Orchestra offers two options for MFA:

When enabled, you'll either have to enter a code from your chosen authenticator app, or you’ll receive a unique security code via email to verify it's you trying to log in, depending on what form of MFA you select.

To authenticate your account using your mobile phone or tablet, you’ll need to download an app. We recommend Google Authenticator for Android or iOS. Once it has installed, open the app and select the plus icon in the bottom right of the screen (iOS) or open the settings for the app and click 'Add account' (Android), select 'Scan a QR code' and scan the QR code that is displayed on Orchestra. Once the QR code is scanned, enter the verification code generated by the app and select 'Update account details' below. If you cannot scan the QR code, select 'Can't scan it?' and follow the steps on the page.

To authenticate your account using email, simply click 'Update account details' at the bottom of the page and your MFA has been set up. A unique verification code will be sent to your email when you log in to Orchestra.

There is an option to generate Backup Codes. These are codes that will also work when prompted for your MFA verification code at login after setting up MFA. If generated, store the backup codes in a secure location as they can be used to access your account.

When selecting 'Update account details' to set up any of the aforementioned MFA methods, you may be prompted to add a country-code to the phone number field in the contact details box at the top of the page. If so, simply click the dropdown to the left of your phone number and select the appropriate country code (i.e. Australia +61, New Zealand +64).

You can change your MFA method at any time so long as you are logged in. To do this, simply navigate back to your account page, select a different MFA method, and follow the relevant steps described above.

Please contact us.