If you're an individual MURAL member, as an alternative to single sign-on (SSO), you can now set up two-factor authorization (2FA, sometimes known as MFA) for added security.
What is 2FA?
2FA (two-factor authentication) is an extra security measure that you can enable in your MURAL account. 2FA is sometimes referred to as MFA (multi-factor authentication). Once you set up 2FA for your account, here's how it works:
To sign in to MURAL, you’ll enter your password along with a one-time verification code.
You’ll get the verification code sent to your cell phone, either by text message or from an authentication app.
Enabling 2FA increases security and helps prevent hackers from accessing your account. 2FA is available on all versions of MURAL, including the native apps.
Note: You cannot enable 2FA if you already have SSO enabled. Also, if you're on an Enterprise plan that already requires 2FA, you can't set 2FA up individually. You'll simply follow the 2FA enrollment flow as part of the Enterprise 2FA.
Set up 2FA
There are three steps to set up 2FA in your MURAL account:
Install an authentication app on your mobile device.
Enable 2FA in MURAL.
Connect the configuration between MURAL and the authentication app.
Step 1: Install an authentication app
To use 2FA, download one of the following apps on your mobile device:
Step 2: Enable 2FA in MURAL
After downloading your preferred authentication app, enable 2FA in MURAL:
Log in to your MURAL account.
Click your avatar in the bottom left corner of the screen.
Click Profile Settings.
Click the Two-factor authentication checkbox under Security. A pop-up window is displayed.
Enter your MURAL password, then click Next.
Step 3: Connect the Configuration
After enabling 2FA, you’ll see instructions to connect the configuration on your device. Open your authenticator app on your mobile device.
You can connect the configuration in one of two ways:
Scan a QR code
1. Use your mobile device's camera to scan the modal’s QR code.
2. Click Next and move to the next step.
Enter a setup key
1. Specify the account name.
2. Enter the modal’s secret key in the app.
3. Move to the next step in the enrollment process.
Once you configure your device:
A MURAL modal will request the 6-digit code from your authenticator app.
Enter the code in the modal and click Next.
Note: Make sure to save the recovery codes! If you need to login to MURAL and don't have your mobile device nearby, you can use a recovery code to sign in.
Sign in with 2FA
So, you enrolled in 2FA and are ready to log in to MURAL. Here’s what you need to do on your next login:
Enter your MURAL email and password.
Enter the 6-digit code from your authenticator app and click Verify.
Can I get recovery codes?
If you don't have your mobile device or accidentally deleted your authentication app, you can use one of your backup codes to sign in. You can only use each code once. Your backup codes were provided when you first set up 2FA. They're also available on your profile page. If you run out of recovery codes, MURAL will automatically send an email with the newly generated codes.
If you don't have your mobile app authenticator or your backup codes, you can contact MURAL support to manually disable 2FA for your account.
Forgot your password?
If you forgot your password, you can request a password reset. You’ll receive an email with a link to reset your password.
Don’t see an option to enable 2FA?
If the Two-factor authentication checkbox is enabled in your Profile settings and you can't uncheck the checkbox, don't worry! This means your company already has 2FA turned on for you.
Visit this article for more information on company admins requiring 2FA.
Do you see a message saying, “If you use login credentials from a third party (SSO), unfortunately you can’t change your name or email”? This message means you have SSO enabled and/or have an email domain that’s attached to a company in MURAL. In this case, you can’t use 2FA.