You can now protect your membermeister sign-in with two-factor authentication (2FA). Once enabled, signing in takes two steps: your password, then a 6-digit code from an authenticator app on your phone.
For: all team members who sign in to membermeister, whatever their access level.
Why use it
A password can be guessed, reused on another site or leaked. With 2FA, someone who has your password still can't access your account without your phone. Your account holds student contact details and payment information, so it's worth the couple of minutes it takes to set up.
Good to know
2FA is optional. Each team member decides whether to turn it on for their own login. It may become compulsory in the future.
You'll need an authenticator app, such as 1Password, Authy, Google Authenticator, Microsoft Authenticator or the Passwords app on iPhone/iOS.
It protects your own login only. Other team members turn it on from their own User Settings.
Account admins can see who has 2FA enabled. In Account Settings, under Team members, a shield icon appears next to everyone who has turned on 2FA.
Turning 2FA on or off signs you out on your other devices. You would need to sign in again there but it's best to leave it enabled.
How to turn on 2FA
Select your name in the top right corner, then select User Settings.
Scroll to Two-factor authentication and select Manage two-factor authentication to open your 2FA settings.
Select Set up two-factor.
Add membermeister to your authenticator app:
On an iPhone, iPad or Mac: select Set up on this device. When your device asks which saved login to add the code to, choose your membermeister login.
On any other device: scan the QR code with your authenticator app. If you can't scan it, type the set-up key shown below the code into your app instead.
Enter the 6-digit code from your app and select Turn on two-factor.
Save your backup codes. Each code can be used once to log in.
From then on, each time you sign in you'll be asked for a code from your app after entering your password. Many authenticator apps will fill it for you automatically.
Backup codes
When you turn on 2FA, membermeister gives you 10 one-time backup codes. If your phone is lost or your app isn't working, enter one of these on the sign-in screen instead of a code from your app. Each code works once.
Save your backup codes straight away. They're only shown once. Select Copy to clipboard and keep them somewhere safe, such as your password manager.
To get a new set, open Manage two-factor authentication, enter your current password and select Create new backup codes. Your old codes will be invalidated. The same page shows how many unused codes you have left.
Staying in control
Email alerts.
We email you when 2FA is turned on or off, when it's reset for you, and when a backup code is used to sign in. If you didn't make the change, contact us straight away.Password resets.
Resetting your password won't by itself allow access to your account. You still need a code from your app or a backup code, so a reset link alone can't get someone into your account.Lost your phone and your backup codes?
Ask a team member with Full access to reset 2FA for you. They need to access Account Settings, select your name under Team members and select Reset 2FA.
After that, you can then sign in with just your password and set up 2FA again. Nobody can reset their own 2FA this way, so if There is nobody else with full access to your account then please email [email protected] and we will help.Turning it off.
Open Manage two-factor authentication, enter your current password and a code from your app (or a backup code), then select Turn off two-factor.
Why we do not provide a Email or SMS backup options
We made a conscious decision not to rely on email or SMS codes as a backup option. The security offered by two-factor authentication is only as secure as the weakest reset point. Email resets are very weak and would offer no further security over a password reset.
SMS is slightly better but still considered a potential backdoor through methods like SIM swapping, for example.
We’ve therefore decided to allow account admins to reset the two-factor authentication for other team members, or, if required, contact our support team who can help reset access for you.
Related articles
Still need help? Select Get Support in your membermeister account or email [email protected].