Password and multi-factor authentication (MFA)

Password requirements, password change/recovery, and enabling and configuring MFA in eAuditor cloud®.

Password

Creating an account and password requirements

During registration at: https://app.eauditor.eu/register a password is set. It must comply with the following policy:

• minimum 8 characters,

• at least one uppercase and one lowercase letter (A–Z, a–z),

• at least one digit (0–9),

• at least one special character, e.g. @ # $ % ! ?.

Tip: do not use dictionary or obvious passwords (e.g., “Firma2025!”). Preferably choose a long passphrase and do not reuse passwords across services. It is recommended to use a password generator and manager.

Password change (user/administrator)

Path: Account Management → Organizations → Administrators → Admins

1

Open the list of administrators.

2

Select Edit for the selected administrator.

3

Select Change Password in the Password section

4

Set a new password compliant with the password policy and save changes.

Account preview: in the tab Account Management → User Profile you will see information about the currently logged-in account.

Forgotten password

On the login screen, in the lower left corner select Remind password and follow the instructions in the email.

Multi-Factor Authentication (MFA)

MFA increases account security by requiring an additional identity verification step at login.

MFA

Who can enable MFA?

MFA activation for administrators can only be performed by the system administrator. Other users see the status and available options in the Profile.

Enabling MFA for an administrator (by the system administrator)

Option 1: Account Management → Organizations → Administrators → Admins

Option 2: Account Management → Account Management

1

Open Edit for the selected administrator.

2

In the Two-Factor Authentication (2FA) enable the requirement to use one of the available methods.

3

Select an authentication method:

• Authenticator app (e.g., Microsoft Authenticator, Google Authenticator),

• Email code (confirmation by a code sent to the email address).

After saving changes, at the next login the administrator will be prompted to configure the authenticator app.

MFA configuration – authenticator app (user)

Configuration will be required at the next loginif the administrator has activated the 2FA requirement.

Configuration steps:

1

A QR code.

2

will appear on the configuration screen Open the authenticator app and scan

the QR code.

3

Enter e.g., Microsoft Authenticator / Google Authenticator one-time code

4

generated in the app in the field in the system..

Note: MFA is configured When using an authenticator app (e.g., Microsoft Authenticator, Google Authenticator),ensure you perform an app backup

. If you lose your phone without a backup you may lose access to the account and will need to contact the system administrator.

MFA configuration – email code (user)

1

After this method is enabled by the administrator: At login you will receive a code to the email address

2

assigned to the account.

Enter the code in the system to complete the login. This step will be required.

at every login

Best practices and troubleshooting Device change

(2FA app): before changing the phone add a second device in the app or update 2FA on the system side. If access is lost, contact the system administrator.No email with code received : check theSPAM folder, mail filters and the correctness of the address in the.

Profile2FA code errors

: ensure that the time on the phone is set automatically (time synchronization affects the correctness of time-based one-time codes generated in the Authenticator app).Password strength

: consider a length of 12+ characters and a password manager for secure storage.

Frequently Asked Questions (FAQ)

YesCan MFA be used by email only?

The administrator can enforce the email method instead of the app.

Can a regular user enable MFA by themselves? folder, mail filters and the correctness of the address in theConfiguration and overview are done from , but the requirement to use MFA is set by the.

system administrator

YesCan I change the MFA method after configuration?

Request the administrator to update the 2FA settings. Contact in case of problems: [email protected]