Setting up multi-factor authentication in ConvertKit
Multi-factor authentication (MFA) makes logging into your ConvertKit account more secure because it requires you to provide a temporary verification code in addition to entering your password.
Doing so verifies your identity and makes it more difficult for your ConvertKit account to fall into the wrong hands.
Using multi-factor authentication is optional. If you don't do so, we'll send device authentication emails to verify your identity when you log in from an unrecognized browser or device.
That said, we'd still recommend enabling multi-factor authentication for even stronger security.
Here’s how to set it up.
Log into your ConvertKit account. Click your account name at the top right of the navigation to go to the Settings page.
Scroll down to the Multi-Factor Authentication section, then set up multi-factor authentication for your account again using one or both of these options:
NOTE: If you enable both the authenticator app and SMS verification options, we'll ask for your authenticator app's verification code when you log in. However, you'll also have the option of requesting an SMS verification code if you'd prefer.
Setting up your authenticator app
When you enable the Authenticator app option, a QR code will appear for you to scan with an authenticator app.
If you don't already have one, Authy, Google Authenticator, and 1Password are all good authenticator app options.
Open your authenticator app and add a new account to it, then scan the QR code provided. Alternatively, copy/paste the text code below the QR code into your app.
Follow the rest of your authenticator app's instructions to finish setting up the account. In the Authy app, for example, you'd give your account a nickname and then save your settings.
Your authenticator app will display a verification code. Type this verification code into the multi-factor authentication settings window in ConvertKit and click the Enable Verification button to complete setup.
IMPORTANT: Once you've set up your new authenticator app account, the verification codes from any authenticator app account you've previously set up for your ConvertKit logins will stop working. You can safely delete this old account as it's no longer needed.
Setting up your authentication SMSes
If you've selected the SMS authentication option, enter your mobile number and country code into the window that pops up.
We'll SMS a verification code to the mobile number you've provided. Key this code into the multi-factor authentication settings window, and click the Enable Authentication button to complete setup.
If you've successfully set up multi-factor authentication, the relevant authentication method(s) will be enabled as shown below. You can also track the date you last logged in using each authentication method.
To turn off multi-factor authentication, simply toggle the switch for the relevant authentication method to the "Off" position.