Managed Multi-Factor Authentication (MFA)

Multi-factor authentication, or MFA, refers to the use of more than one identity factor to authenticate a user. In addition to entering a username and password, a user needs to confirm a code sent through a second channel, like their email or phone. MFA is more secure than relying on a password alone.

If you only use a password to authenticate a user, it leaves your account vulnerable if that password is weak or has been exposed elsewhere. Requiring a second factor makes it harder for anyone else to access your account, even if they have your password.

Starting October 1, 2026, MFA is required for every user logging into zkipster through the browser, on every plan level. There's nothing you need to set up; by default, we'll send a verification code to the email address on your user profile each time you log in.

Please note: Because your MFA code will be sent to your profile email, it's important that this address is accurate and that you have access to that inbox. You can check and update it any time under Profile Settings.
​

If you've already set up MFA with a phone number, nothing changes for you right away. You'll simply start receiving your verification code through both SMS and email, and you can use whichever one is more convenient at login.

If you later choose to turn off SMS-based MFA, you'll continue receiving your code by email only; this is your account's baseline method and can't be fully disabled.

Once you verify a device with an MFA code, you have the option to have zkipster remember that device for 30 days. During that window, you won't be asked to re-enter a code each time you log in from that same device. After 30 days, or if you log in from a new device or browser, you'll be asked to verify again.

MFA enforcement covers logging into zkipster through a web browser. It does not apply to logging into the zkipster mobile app. You won't be prompted for an MFA code on the zkipster Mobile App.

In addition to the baseline email MFA described above, Enterprise accounts can further manage and enforce MFA settings centrally through the Security tab in Account Settings — for example, requiring SMS as an additional factor for all users, or resetting a user's MFA setup. See Custom Security Policies for details.

Please note: MFA is available at the individual user level for all plans, but centralized management and SMS-based MFA enforcement options remain an Enterprise-level feature.

If you would like to upgrade your account to Enterprise or have any questions on Management MFA, please contact zkipster on sales@zkipster.com.