Two-factor authentication (MFA)
Two-factor authentication asks for a code from an authenticator app, in addition to your password, when you sign in. It protects your account even if your password leaks. We strongly recommend enabling it.
Red Kite works with any authenticator app that supports time-based codes (TOTP), such as Google Authenticator, Microsoft Authenticator, 1Password or Bitwarden.
Enabling MFA
- Open your Profile, from the menu under your avatar at the top right.
- In the Two-factor authentication section, turn on the toggle.
- Enter your current password and click Continue.
- Scan the QR code with your authenticator app. If you cannot scan it, click Can't scan the code? to see the secret and enter it manually.
- Enter the 6-digit code shown by your app to confirm.
Signing in with MFA
After entering your password, enter the 6-digit code shown by your authenticator app. You have 5 minutes to enter it.
After 10 wrong codes, your account is locked for 5 minutes.
Disabling MFA
In your Profile, turn off the Two-factor authentication toggle and confirm with your password.
Lost your authenticator?
Red Kite does not provide recovery codes. If you lost access to your authenticator app, contact us to reset your two-factor authentication.
Administrators can see which users enabled MFA in Management > Users.