Summary

Multi-factor authentication (MFA) adds a second check to the Gingr login. This article explains how MFA works, who must use it, and the best practices for keeping your business data secure.

What This Does

Gingr is committed to the security of your data. The most common source of data exposure is simple: weak passwords, shared user accounts, and loose permissions about who can access and change your data.

To follow best security practices and industry standards, Gingr offers multi-factor authentication. MFA is required for all admin user accounts. It is also an opt-in feature for other user groups, if you want to use it for them.

MFA is an extra layer of security. Users give two or more verification methods before they get into their accounts. This makes it harder for unauthorized people to breach your data.

Requirements

• For non-admin user groups, the user group needs the Require MFA At Login permission to sign in with multi-factor authentication.

Important: All users who log in with an email and password must use a strong password. Passwords must be at least 12 characters long and include at least one uppercase letter, one lowercase letter, and one number or one special character. Users must update passwords at least once every 90 days. These rules protect sensitive business and customer data and reduce the risk of unauthorized access.

Best Practices

Follow these best practices for user logins and access control to protect your digital information inside and outside of Gingr:

• Strong passwords: Your password is the first defense against unauthorized access. Make sure passwords are strong, unique, and updated often. We recommend a mix of uppercase and lowercase letters, numbers, and symbols.
• User account sharing: Never share your user account credentials. Never leave them where someone else can see or capture them. Sharing logins is a significant security risk. Give each team member a unique login so you can keep accountability and data security.
• Proper permission delegation: Review and manage user permissions. Grant access only to the data and features each team member needs for their role. Gingr also lets you delegate specific admin functions to non-admins. Learn more in Admin Delegations (Topic Outline).

Topics

• Enable MFA for User Groups How-To
• Log In with Multi-Factor Authentication How-To
• Set MFA Preference How-To