Watch Mandric walk you through this topic
Two-factor authentication (2FA) isn't part of onboarding. You enable it later from Settings once you're in the platform.
Where To Enable It
- Open the app at app.getbrokerplus.ca.
- Go to Settings in the sidebar (bottom-left, click your avatar).
- Scroll to the Two-Factor Authentication card.
- Click Enable.
You'll be asked to choose between a passkey, an authenticator app, text-message codes, or email codes.
Passkey vs Authenticator App vs Text Message vs Email
- Passkey - uses your device's biometrics (Face ID, Touch ID, Windows Hello). Fastest. Use this if your laptop or phone supports it.
- Authenticator app - generates a 6-digit code that rotates every 30 seconds. Use Google Authenticator, 1Password, Authy, or similar. Use this if you log in from many different devices.
- Text message - we text a 6-digit code to your mobile number each time you sign in. Pick this if you'd rather not use an authenticator app. You'll confirm your number with a code once during setup.
- Email - we email a 6-digit code to your account address each time you sign in. Pick this if you'd rather not use an app or share a mobile number. Nothing extra to set up, since your email is already verified.
Whichever you choose, you'll get a set of one-time backup codes at the end. Save them - they get you in if you lose access to your phone.
You can register more than one method.
Logging In With 2FA Enabled
After you log in with your password, you'll be prompted for your 2FA. Tap your passkey, paste the 6-digit code from your authenticator app, or enter the code we send by text or email. If you use text or email codes, we send one automatically as soon as you reach the step. That's it.
I Lost My Passkey, Authenticator, Or Phone
Use one of your backup codes to sign in, then set up a new method from Settings. If you're out of backup codes too, contact support to reset it. We'll verify your identity before resetting so we can be sure the request is coming from you.
What To Do Next
- Add at least one backup 2FA method so you're not locked out if your primary device dies.
- If you're already locked out, see Can't Log In.