> For the complete documentation index, see [llms.txt](https://eaclouddoc.eauditor.eu/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://eaclouddoc.eauditor.eu/eacloud-docs-en/getting-started/quickstart/password-and-multi-factor-authentication-mfa.md).

# Password and multi-factor authentication (MFA)

Password requirements, password change/recovery, and enabling and configuring MFA in eAuditor cloud®.

## Password

### Account creation and password requirements

During registration at: <https://app.eauditor.eu/register> a password is set. It must meet the following policy:

* minimum **8 characters**,
* at least **one uppercase** and **one lowercase letter** (A–Z, a–z),
* at least **one digit** (0–9),
* at least **one special character**, e.g. `@ # $ % ! ?`.

{% hint style="warning" %}
**Tip:** do not use dictionary or obvious passwords (e.g., “Company2025!”). The best choice is a long passphrase, and do not reuse passwords across services. It is recommended to use a password generator and password manager.
{% endhint %}

### Password change (user/administrator)

**Path:** **Account Management → Organizations → Administrators → Admins**

{% stepper %}
{% step %}
Open the administrators list.
{% endstep %}

{% step %}
Select **Edit** for the selected administrator.
{% endstep %}

{% step %}
Select **Change Password** in the Password section
{% endstep %}

{% step %}
Set a new password that complies with the password policy and **save the changes**.
{% endstep %}
{% endstepper %}

**Account view:** in the tab **Account Management → User Profile** you will see information about the currently signed-in account.

### Failed login

To increase the security of user accounts, the system uses a mechanism **of temporary login lockout after repeated incorrect password entry**.

After **10 consecutive failed login attempts** the account is temporarily blocked. The eleventh login attempt is possible only after **60 seconds**.

Each subsequent failed attempt extends the lockout period. A successful login resets the mechanism, restoring the initial lockout time of 60 seconds.

### Forgot password

On the login screen, in the lower-left corner, select **Forgot password** and follow the instructions in the email message.

<figure><img src="/files/8cba6d76b0deade9999123f9c16c700afa8ab535" alt="" width="375"><figcaption></figcaption></figure>

### Multi-factor authentication (MFA)

MFA increases account security by requiring an additional identity verification step during login.

## MFA

### Who can enable MFA?

**Only the system administrator can activate MFA for administrators.** Other users can see the status and available options in the **Profile**.

### Enabling MFA for an administrator (by the system administrator)

**Option 1: Account Management → Organizations → Administrators → Admins**

**Option 2: Account Management → Account Management**

{% stepper %}
{% step %}
Open **Edit** for the selected administrator.
{% endstep %}

{% step %}
In the **Two-Factor Authentication (2FA)** enable the requirement to use one of the available methods.
{% endstep %}

{% step %}
Select the authentication method:

* **Authenticator app** (e.g., Microsoft Authenticator, Google Authenticator),
* **Email code** (confirmation with a code sent to the email address).
  {% endstep %}
  {% endstepper %}

> After the changes are saved, the administrator will be prompted to configure the authenticator app at the next login.

#### MFA configuration – authenticator app (user)

Configuration will be required on the **next login**, if the administrator has activated the 2FA requirement.

**Configuration steps:**

{% stepper %}
{% step %}
A **QR code**.
{% endstep %}

{% step %}
will appear on the configuration screen. **Open the authenticator app and** scan

the QR code.
{% endstep %}

{% step %}
e.g., Microsoft Authenticator / Google Authenticator **Enter the** one-time code
{% endstep %}

{% step %}
**generated in the app in the field in the system.**.
{% endstep %}
{% endstepper %}

{% hint style="danger" %}
**MFA is configured** When using an authenticator app (e.g., Microsoft Authenticator, Google Authenticator), **make sure to back up the app**. If you lose your phone without a backup, you may lose access to the account and will need to contact the system administrator.
{% endhint %}

#### MFA configuration – email code (user)

After the administrator enables this method:

{% stepper %}
{% step %}
When logging in, you will receive **a code to the email address** assigned to the account.
{% endstep %}

{% step %}
Enter the code in the system to complete login.
{% endstep %}
{% endstepper %}

This step will be required **at every login**.

## Best practices and troubleshooting

{% hint style="success" %}
**Device change** (2FA app): before changing your phone, add a second device in the app or update 2FA on the system side. If access is lost, contact the system administrator.
{% endhint %}

{% hint style="success" %}
**The email with the code is not arriving**: check the **SPAM**, mail filters, and the correctness of the address in the **Profile**.
{% endhint %}

{% hint style="success" %}
**2FA code errors**: make sure the time on the phone is set automatically (time synchronization affects the correctness of one-time time-based codes generated in the Authenticator app).
{% endhint %}

{% hint style="success" %}
**Password strength**: consider 12+ characters and a password manager for secure storage.
{% endhint %}

## Frequently Asked Questions (FAQ)

<details>

<summary><strong>Can MFA be used only by email?</strong></summary>

**Yes**. The administrator can enforce the email method instead of the app.

</details>

<details>

<summary><strong>Can a regular user enable MFA on their own?</strong></summary>

Viewing and configuration are done from **Profile**, but **the** requirement **to use MFA is set by**.

</details>

<details>

<summary><strong>Can I change the MFA method after configuration?</strong></summary>

**Yes**. Ask the administrator to update the 2FA settings.

</details>

**Contact in case of problems:** contact the system administrator or the eAuditor cloud® support team - <mark style="color:orange;">**<support@eauditor.eu>**</mark><br>

<br>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://eaclouddoc.eauditor.eu/eacloud-docs-en/getting-started/quickstart/password-and-multi-factor-authentication-mfa.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.