Multi-factor authentication (MFA) adds a second step when you sign in to LoyaltyLion. As well as your password, or the sign-in link we email you, you enter a one-time code from an authenticator app such as Google Authenticator, Authy or 1Password.
In this article:
Who can use MFA
MFA is available to every LoyaltyLion user, on all plans. Each user sets it up for their own sign-in.
You need MFA turned on to download exports. Until you set it up, the Exports page shows a reminder and LoyaltyLion will not download an export for you.
Setting up MFA
Have your authenticator app open on your phone before you start.
In LoyaltyLion, open the menu in the top-right corner and select Profile settings.
Under Multi-factor authentication, click Set up MFA.
Scan the QR code with your authenticator app. If you can't scan it, enter the code shown below the QR code into the app instead.
Enter the 6-digit code from your authenticator app in Confirmation code.
Enter your current Password. If you sign in without a password, enter the Code from your email that we send you instead.
Click Enable MFA.
You'll see MFA has been enabled, followed by your backup codes. Save them before you close the window.
Signing in without your authenticator app
When you set up MFA, we show you 6 backup codes. Each code signs you in once if you can't use your authenticator app. You won't be able to view them again, so store them somewhere safe.
If you run out of backup codes, turn MFA off and set it up again. You'll get a new set of codes, and you'll need to add LoyaltyLion to your authenticator app again.
If you have lost access to your authenticator app and have no backup codes left, contact our Support team at support@loyaltylion.com and we'll help you get back into your account.
Turning off MFA
Open the menu in the top-right corner and select Profile settings.
Under Multi-factor authentication, click Turn off MFA.
Enter an Authentication code from your app, or one of your backup codes.
Enter your Password, or the Code from your email if you sign in without a password, and click Turn off MFA.
You can't turn off MFA while an account you belong to requires it. If you need new backup codes in that case, contact our Support team.
Requiring MFA for everyone on your account
The account owner, or a user with the Admin role, can make MFA compulsory for everyone on the account. Users who haven't set it up have to do so the next time they sign in.
This setting is on the Users page, which is part of user management, available on Classic plans and above.
You need MFA turned on for your own sign-in before you can change this setting.
Open the menu in the top-right corner and select Manage LoyaltyLion account.
From the left sidebar, choose Users.
In Require multi-factor authentication, click Turn on.
Enter a code from your authenticator app, or a backup code, and click Turn on.
You'll see Multi-factor authentication required. The Users list shows MFA enabled or MFA not enabled next to each user, so you can see who still has to set it up.
FAQ
Why can't I download an export?
Downloading an export needs MFA turned on for your own sign-in. Set up MFA from Profile settings, then go back to the Exports page.
Can an Admin reset MFA for another user?
No. Admins can see whether each user has MFA turned on, but can't turn it off or reset it for them. A user who has lost their authenticator app and their backup codes should contact our Support team at support@loyaltylion.com.