Protect a Host account with MFA and session controls

Multi-factor authentication (MFA) adds an authenticator-code check after the password. Active-session controls help remove access from lost, shared or unfamiliar devices.

Before you start

Sign in to the correct ShareDay account and, if you manage more than one business or event, check the name shown in the account switcher before making changes.

How to do it

1. Open Account and find Security or multi-factor authentication.
2. Choose to enable authenticator MFA and scan the QR code with a trusted authenticator app. If scanning is unavailable, enter the setup key manually.
3. Enter the current six-digit code to confirm setup before leaving the page.
4. Save the backup codes somewhere secure and separate from the device used for authentication. Each backup code should be treated as a password.
5. Sign out and perform one test sign-in before relying on the setup.
6. Review active devices or sessions and sign out any you do not recognise or no longer use.
7. If a device is lost, change the password, revoke its sessions and review account and event activity.

Important details

• Never send QR setup keys, authenticator codes, backup codes or passwords to ShareDay support.
• Authenticator codes depend on accurate device time. Automatic date and time should be enabled.
• Email verification and MFA protect different parts of the account; keep the account email secure as well.

If something does not look right

• If every code is rejected, check the phone’s automatic time and try the next fresh code.
• If the authenticator device is unavailable, use one saved backup code, then replace the MFA setup and generate new backup codes.
• If neither authenticator nor backup codes are available, use the official account-recovery route and be prepared to verify ownership.

Need help? Use the Help Centre contact form and include the business or event name, the page you were using, and what you expected to happen. Do not send passwords or full payment-card details.