Multi-Factor Authentication (MFA) in Eve

Last updated: September 30, 2026

Overview

Multi-Factor Authentication (MFA) is a security feature that requires users to provide two or more verification methods to access Eve. Instead of relying solely on a password, MFA adds additional layers of security to protect your organization's data from unauthorized access, even if a password is compromised. Multi-factor authentication requires a second verification step beyond a password when signing in to Eve.

It is an organization-wide setting. Turning it on applies it to everyone in the firm's Eve account, and it cannot be enabled for only some users.

How It Works

MFA combines a password with a second factor:

  • Something you have: a phone or email account receiving a verification code.

  • Something you are: biometric data such as a fingerprint, where the authenticator app supports it.

The first sign-in after MFA is enabled prompts the person to choose and set up a method, with step-by-step guidance. That setup happens once per person.

The Available Methods

  • Authenticator app, generating a time-based code in Microsoft Authenticator, Google Authenticator, Authy, or similar. The most robust of the three.

  • SMS, a code by text message.

  • Email, a code to the registered address.

What MFA Does Not Do

  • It cannot be applied selectively. The setting covers the whole account, so enabling it for a security-conscious team enables it for everyone.

  • It does not change what a person can see. Access is governed by permission roles, which are separate. See 📄 Permission Roles in Eve.

  • A lost device is a reset, not a lockout. A Firm Admin can reset MFA for a user.

Key Terms

  • TOTP: Time-based one-time password. The rotating code an authenticator app generates.

  • SMS MFA: A verification code sent by text message.

  • Email MFA: A verification code sent to the registered email address.