Set up Multi-Factor Authentication (MFA)

Enable MFA for your account, choose an authentication method, and log in using your secondary factor

The security of your Constant Contact account is important to us! To help keep your account more secure from hackers and account takeovers, we require all users to enroll in Multi-Factor Authentication (MFA) . This provides an extra layer of security to help prevent unauthorized logins. There is no extra cost for this service.

Important note: Once you enroll in MFA, you can't unenroll, but you can change your secondary factors at any time.

• How MFA works
• Enabling MFA in your account
• Choosing your secondary factors

• Setting up SMS authentication
• Setting up Voice Call authentication
• Setting up Okta Verify (Not available in all accounts)
• Setting up Google Authenticator (Not available in all accounts)

• Logging in with MFA
• Switching authentication methods during login
• Updating or changing your secondary factors

How MFA works

After logging in to your Constant Contact account with your username and password, you'll be prompted to enter a one-time code or approve a push notification to your mobile device. This secondary factor verifies your identity. You can choose to receive this factor via text message, phone call, or an authenticator app (available on select accounts).

How often are you prompted for MFA?

You're prompted to verify your identity with MFA when you first log in to your account after enabling MFA, and again whenever you log in from a new or unrecognized device. When logging in from an unrecognized device, you'll receive an email notification to help you determine whether the login attempt was expected or unauthorized.

Keep your account secure: If multiple people work in your account and they're currently sharing your login information, be sure to add them as individual users so each has their own username and password. This allows each user to set up their own account logins and MFA factors on their devices.

Enabling MFA in your account

If your account is already enabled for MFA by default, you're automatically prompted to "Add Multi-factor Authentication" when you log into your account for the first time. If you're being prompted for MFA, skip to the steps for setting up your secondary factors.

If you're not sure if your account has MFA enabled, you can check through your account settings:

1. Click the profile name in the upper-right and select Settings.
   
   
   
   
2. Scroll down to the Multi-factor authentication section and click Set Up.
   Note: If you see a Reset button instead, MFA is already enabled.
   
   
   
   
3. If prompted, enter your Constant Contact username and password, then click Sign in.
   
   
   
   
4. Click Continue to confirm you want to enable MFA. You'll be logged out of your account.
   
   
   
   

The next time you log into your Constant Contact account, you'll be prompted to set up your secondary factors of authentication.

Choosing your secondary factors

Each secondary factor can be associated with only one device. We highly recommend setting up multiple secondary factors on different devices (e.g., your mobile phone, landline, work phone, and tablet) to prevent you from being locked out of your account if you lose or misplace one of your devices. For example, if you set up SMS Authentication with your mobile phone, you should set up Voice Call Authentication with your landline phone.

Email addresses cannot be used as secondary factors because they are easily compromised. Do not use third-party apps as a replacement for any of our approved MFA apps.

Once MFA is enabled, the next time you log into your Constant Contact account, you're prompted to choose from the following options to set up your secondary factor(s) of authentication. When prompted, click the Setup button next to the option you want to use:

• SMS Authentication - Receive a text message containing a one-time code for you to enter when logging into your account. 
• Voice Call Authentication - Receive a phone call with a one-time verbal code to enter when logging into your account.
• Okta Verify - Approve a push notification sent to your device. This option is not available in all accounts.
• Google Authenticator - Generate a one-time code on your mobile device to enter when logging into your account. This option is not available in all accounts.
  
  
  
  

Setting up SMS Authentication

Both U.S. and international numbers are supported with SMS authentication. Text and data rates may apply.

After clicking Setup next to the SMS Authentication option:

1. Select your country from the drop-down.
2. Enter your phone number in the field.
3. Click Send code.
   
   
   
   
4. In the field, enter the code you received via text message.
5. Click Verify.
   
   
   
   
6. Click Setup for the next method you want to enroll in, or click Finish if you're done.
   
   
   
   

Setting up Voice Call Authentication

Both U.S. and international numbers are supported with Voice Call authentication.

After clicking Setup next to the Voice Call Authentication option:

1. Select your country from the drop-down.
2. Enter your phone number in the field.
3. Click Call.
   
   
   
   
4. Answer the call on your phone and enter the code provided.
5. Click Verify.
   
   
   
   
6. Click Setup for the next method you want to enroll in, or click Finish if you're done.
   
   
   
   

Setting up Okta Verify

If you're already using Okta Verify and need help adding a new account, please visit Okta's Support.

After clicking Setup next to the Okta Verify option:

1. Select whether you have an iPhone or Android device.
   
   
   
   
2. Download the Okta Verify app from your device's app store.
   
   
   
   
3. On your computer screen, click Next.
   
   
   
   
4. Open the Okta Verify app on your device and click the plus sign (+) in the upper-right to add an account.
   Tip: To save time, you can automatically add the account by opening your device's camera and scanning the QR code displayed on your desktop screen.
   
   
   
   
5. Select the Organization account type.
   
   
   
   
6. Click Scan a QR Code.
   
   
   
   
7. Use your mobile device's camera to scan the QR code provided on your computer screen.
   
   
   
   
8. Click Done in the app.
   
   
   
   
9. Back on your desktop screen, click Setup for the next method you want to enroll in, or click Finish if you're done.
   
   
   
   

Setting up Google Authenticator

If you're already using Google Authenticator and need help adding a new account, please visit Google's Support.

After clicking Setup next to the Google Authenticator option:

1. Select whether you have an iPhone or Android device.
   
   
   
   
2. Download the Google Authenticator app from your device's app store.
   
   
   
   
3. On your computer screen, click Next.
   
   
   
   
4. Open the Google Authenticator app on your device and click Get started.
   
   
   
   
5. Click Scan a QR code.
   
   
   
   
6. Use your mobile device's camera to scan the QR code on your desktop screen.
7. Click Next.
   
   
   
   
8. Locate the code in the Google Authenticator app. Your Constant Contact account will display as “identity.constantcontact.com (your username)”.
   
   
   
   
9. On your computer screen, enter the 6-digit code in the field.
10. Click Verify.
    
    
    
    
11. Click Setup for the next method you want to enroll in, or click Finish if you're done.
    
    
    
    

Logging in with MFA

After you log in with your username and password, you'll be prompted to generate a code through the authentication method you set up. 

Logging in with SMS Authentication

1. Click Send code.
2. Enter the code received via text message.
   Note: The code will be valid for 5 minutes. If the code expires, click Resend code to receive a new code.
3. Click Verify.
   
   
   
   

Logging in with Voice Call Authentication

1. Click Call.
2. Answer the call on your phone and enter the code provided.
3. Click Verify.
   
   
   
   

Logging in with Okta Verify

1. Click Send Push.
   
   
   
   
2. Open the notification on your device and click Yes, It's Me to approve the login attempt.
   
   
   
   

Logging in with Google Authenticator

1. Open the Google Authenticator app on your device and locate the code under “identity.constantcontact.com (your username)”.
   
   
   
   
2. On your computer screen, enter the code in the field.
3. Click Verify.
   
   
   
   

Switching authentication methods during login

If you set up more than one secondary factor, you can switch between them when you're logging in. When you're prompted for your secondary factor, click the "Verify with something else" link.

Updating or changing your secondary factors

If you need to update your MFA secondary factors, you can reset them in your account settings or on the account login screen, then enable the factors you want to use going forward.

• Reset your factors for Multi-Factor Authentication

Important note: When you reset MFA for your account, it resets all of the factors you're currently using. If you have multiple factors enabled, each one needs to be updated independently.

Any links we provide from non-Constant Contact sites or information about non-Constant Contact products or services are provided as a courtesy and should not be construed as an endorsement by Constant Contact.

Questions?