Password and Multi-Factor Authentication (MFA)

Password requirements, password change/recovery, and enabling and configuring MFA in eAuditor cloud®.

Password

Account creation and password requirements

During registration at: https://app.eauditor.eu/register a password is set. It must meet the following policy:

• minimum 8 characters,

• at least one uppercase and one lowercase letter (A–Z, a–z),

• at least one digit (0–9),

• at least one special character, e.g. @ # $ % ! ?.

Tip: do not use dictionary or obvious passwords (e.g., “Company2025!”). The best choice is a long passphrase, and do not reuse passwords across services. It is recommended to use a password generator and password manager.

Password change (user/administrator)

Path: Account Management → Organizations → Administrators → Admins

1

Open the administrators list.

2

Select Edit for the selected administrator.

3

Select Change Password in the Password section

4

Set a new password that complies with the password policy and save the changes.

Account view: in the tab Account Management → User Profile you will see information about the currently signed-in account.

Failed login

To increase the security of user accounts, the system uses a mechanism of temporary login lockout after repeated incorrect password entry.

After 10 consecutive failed login attempts the account is temporarily blocked. The eleventh login attempt is possible only after 60 seconds.

Each subsequent failed attempt extends the lockout period. A successful login resets the mechanism, restoring the initial lockout time of 60 seconds.

Forgot password

On the login screen, in the lower-left corner, select Forgot password and follow the instructions in the email message.

Multi-factor authentication (MFA)

MFA increases account security by requiring an additional identity verification step during login.

MFA

Who can enable MFA?

Only the system administrator can activate MFA for administrators. Other users can see the status and available options in the Profile.

Enabling MFA for an administrator (by the system administrator)

Option 1: Account Management → Organizations → Administrators → Admins

Option 2: Account Management → Account Management

1

Open Edit for the selected administrator.

2

In the Two-Factor Authentication (2FA) enable the requirement to use one of the available methods.

3

Select the authentication method:

• Authenticator app (e.g., Microsoft Authenticator, Google Authenticator),

• Email code (confirmation with a code sent to the email address).

After the changes are saved, the administrator will be prompted to configure the authenticator app at the next login.

MFA configuration – authenticator app (user)

Configuration will be required on the next login, if the administrator has activated the 2FA requirement.

Configuration steps:

1

A QR code.

2

will appear on the configuration screen. Open the authenticator app and scan

the QR code.

3

e.g., Microsoft Authenticator / Google Authenticator Enter the one-time code

4

generated in the app in the field in the system..

MFA is configured When using an authenticator app (e.g., Microsoft Authenticator, Google Authenticator), make sure to back up the app. If you lose your phone without a backup, you may lose access to the account and will need to contact the system administrator.

MFA configuration – email code (user)

After the administrator enables this method:

1

When logging in, you will receive a code to the email address assigned to the account.

2

Enter the code in the system to complete login.

This step will be required at every login.

Best practices and troubleshooting

Device change (2FA app): before changing your phone, add a second device in the app or update 2FA on the system side. If access is lost, contact the system administrator.

The email with the code is not arriving: check the SPAM, mail filters, and the correctness of the address in the Profile.

2FA code errors: make sure the time on the phone is set automatically (time synchronization affects the correctness of one-time time-based codes generated in the Authenticator app).

Password strength: consider 12+ characters and a password manager for secure storage.

Frequently Asked Questions (FAQ)

Can MFA be used only by email?

Yes. The administrator can enforce the email method instead of the app.

Can a regular user enable MFA on their own?

Viewing and configuration are done from Profile, but the requirement to use MFA is set by.

Can I change the MFA method after configuration?

Yes. Ask the administrator to update the 2FA settings.

Contact in case of problems: contact the system administrator or the eAuditor cloud® support team - [e-mail]