Enrolling in Multi-Factor Authentication (MFA)

Set up Multi-Factor Authentication (MFA) for your Constant Contact account, choose an authentication method, and log into your account using your secondary factor

The security of your Constant Contact account is important to us! To help keep your account more secure from hackers and account takeovers, we require all users to enroll in Multi-Factor Authentication (MFA) as an extra layer of security that helps prevent unwanted logins. There is no extra cost for this service

• How does logging in with MFA work?
• How do I enroll my account in MFA?
• What authentication methods can I select from for my secondary factor?

• Setting up SMS authentication
• Setting up Voice Call authentication
• Setting up Okta Verify (Not available in all accounts)
• Setting up Google Authenticator (Not available in all accounts)

• How do I get the code to log in with MFA?
• How do I switch to a different authentication method when I have more than one enabled?
• How often am I prompted to log in with MFA?
• Can I update or change my secondary factor to something else?

Important: Once you enroll in MFA, you can't unenroll, but you can change your secondary factors at any time.

How does logging in with MFA work?

After logging into your Constant Contact account with your user name and password, you're prompted for a code, or secondary factor, that you must enter to verify your identity. You choose the manner in which you receive the code, either through a text message to your mobile device, a phone call to a mobile device or land line, or through an authenticator app (not available for all accounts). Learn more:

• Understanding Multi-Factor Authentication (MFA)

How do I enroll my account in MFA?

Keep your account secure: If you have multiple people who work in your account and they're currently sharing your login information, be sure to add them as individual users to assign them their own usernames and passwords instead. This allows each user to set up their own account logins and MFA factors on their own devices.

Your account is automatically enabled for MFA and you're automatically prompted to "Add Multi Factor Authentication" when you log into your account for the first time. If you're being prompted for MFA, skip to these steps for selecting your secondary factor.

If you're not sure if your account has MFA enabled, you can check through your account settings:

1. Click the profile name in the upper-right and select Settings.
   
   
   
   
2. Scroll down to the Multi-factor authentication section and click Set Up.
   Note: If you see a Reset button instead, MFA is already enabled.
   
   
   
   
3. If prompted, enter your Constant Contact username and password, then click Sign in.
   
   
   
   
4. Click Continue to finish enrolling in MFA. You'll be logged out of your account.
   
   
   
   

The next time you log into your Constant Contact account, you'll be prompted to set up your secondary factors of authentication.

What authentication methods can I select from for my secondary factor?

Important: Each secondary factor can be associated with only one device, so we recommend setting up multiple secondary factors on different devices, such as your mobile phone, landline, work phone, and tablet. This helps to prevent you from being locked out of your account if you lose or misplace one of your devices. For example, if you set up SMS Authentication with your mobile phone, you should set up Voice Call Authentication with your landline phone. We also advise against using third-party apps as a replacement for any of our approved MFA apps.

Once enrolled in MFA, the next time you log into your Constant Contact account, you're prompted to choose from the following options to set up your secondary factor(s) of authentication. When prompted, click the Setup button next to the option you want to use:

• SMS Authentication - Enter your mobile phone number to receive a text message with a one-time code for you to enter when logging in to your account.
• Voice Call Authentication - Enter a phone number to receive a phone call with a verbal one-time code for you to enter when logging into your account.
• Okta Verify - Download the Okta Verify app (for Android or Apple) to your mobile device so you can verify your identity by approving a push notification sent to your device. This option is not available to all accounts.
• Google Authenticator - Download the Google Authenticator app (for Android or Apple) to your mobile device to generate a one-time code for you to enter when logging into your account. This option is not available to all accounts.
  
  
  
  

Did you know? Email addresses can't be used as secondary factors because they're easily compromised. MFA requires something you have (e.g., your smartphone) in addition to something you know (e.g., your password).

⏵ Setting up SMS Authentication (Click to expand)

Important: Both U.S. and international numbers are supported with SMS authentication.Text and data rates may apply.

1. Select your country from the drop-down.
2. Enter your phone number in the field.
3. Click Send code.
   
   
   
   
4. In the field, enter the code you received via text message on your mobile device.
5. Click Verify.
   
   
   
   
6. It's recommended that you set up an additional secondary factor. Click Setup for the next method you want to enroll in. If you're done setting up all your desired factors, click Finish.
   
   
   
   

⏵ Setting up Voice Call Authentication (Click to expand)

Important: Both U.S. and international numbers are supported with Voice Call authentication.

1. Select your country from the drop-down.
2. Enter your phone number in the field.
3. Click Call.
   
   
   
   
4. Answer the call on your phone and enter the code provided.
5. Click Verify.
   
   
   
   
6. It's recommended that you select an additional secondary factor. Click Setup for the next method you want to enroll in. If you're done setting up all your desired factors, click Finish.
   
   
   
   

How do I get the code to log in with MFA

After you log in with your username and password, you're prompted to create your code through the authentication method you've enabled. Most have a button to initiate the process, but each looks slightly different:

How do I switch to a different authentication method when I have more than one enabled?

If you set up more than one authentication method enabled, you can switch between them when you're logging in. When you're prompted to for your secondary factor, click the "Verify with something else" link to .

How often am I prompted to log in with MFA?

You're prompted to verify your identity with MFA when you first log into your account after enabling MFA, and then you're prompted when you log in to your account from a new or unrecognized device, or after you delete cookies or cache that stores the information that recognizes your device. When you're prompted for MFA from an unrecognized device, you will receive an email letting you know so you can determine if the login attempt was expected or possibly a bad actor.

• Why did I receive a "New sign-on notification" email?

Can I update or change my secondary factor to something else?

If you need to update your MFA secondary factors, you can reset them from within your account settings or from the account login screen and then enable the factors you want to use going forward.

• Reset your factors for Multi-Factor Authentication

Important: When you reset MFA for your account it resets all of the factors you're currently using. If you have multiple factors enabled, each one needs to be updated independently.

Any links we provide from non-Constant Contact sites or information about non-Constant Contact products or services are provided as a courtesy and should not be construed as an endorsement by Constant Contact.

Questions?