Setting up Multi-Factor Authentication (MFA)

There are two ways to verify your identity:

1. Email verification code: Receive a one-time verification code via email that allows you to log in
2. Authenticator App: Use an authenticator app (eg. Google Authenticator) on your mobile device to generate a verification code

You can choose the method that works best for you.

How to enable MFA

Before you begin, make sure you have access to the email address associated with your GuestRevu account. If you choose to use an authenticator app, have your mobile device available.

1. Log in to your GuestRevu account at https://my.guestrevuapp.com/login
2. Click the arrow beneath your name in the top left-hand corner and select Profile
   
3. Select the Security tab
   
4. Choose your preferred MFA method and click Start setup

Option 1: Email verification code

If you choose to receive a verification code by email:

1. After clicking Start setup, a one-time verification code will be sent to the email address associated with your GuestRevu account
2. Enter the verification code sent to your email, and click Confirm setup
3. Once MFA has been enabled, you will be presented with recovery codes. Make sure you download or record these codes and keep them somewhere safe!
4. Once the recovery codes have been downloaded and stored in a safe place, click I have saved these codes
5. You will be redirected back to the login screen and will need to log in again using a new verification code (not the same one you used for MFA Setup)

If you don’t receive the email containing your verification code:

• Check your spam or junk folder
• Make sure you are checking the email address associated with your GuestRevu account
• Wait a few moments and try requesting a new code

If you still don’t receive a code, please contact the GuestRevu Support team.

Option 2: Google Authenticator app

You can also use the Google Authenticator app to generate your verification codes.

Before you begin, install Google Authenticator on your mobile device.

1. Select the Google Authenticator option
2. Open the Google Authenticator app
3. In GuestRevu, you’ll be shown a secret key, a setup URI, and a setup QR code
4. You can set up Google Authenticator in any of the following ways:
1. Scan the QR code: Use Google Authenticator to scan the QR code provided
2. Enter the secret manually: Enter the secret key shown in GuestRevu into Google Authenticator
5. Google Authenticator will generate a 6-digit verification code
6. Enter the 6-digit verification code, and click Confirm to complete the setup
7. Once MFA has been enabled, you will be presented with recovery codes. Make sure you download or record these codes and keep them somewhere safe!
8. Once the recovery codes have been downloaded and stored in a safe place, click I have saved these codes
9. You will be redirected back to the login screen and will need to log in again using a new verification code (not the same one you used for MFA Setup)

Recovery codes

Recovery codes are backup codes that you can use to access your GuestRevu account even if you're unable to access your usual MFA method.

For example, you may need a recovery code if you no longer have access to the device where your authenticator app is installed.

We recommend downloading and storing your recovery codes somewhere safe when you enable MFA.

Regenerating your recovery codes

You can generate a new set of recovery codes from your Security settings

To regenerate your recovery codes:

1. Go to Profile > Security
2. Click Regenerate recovery codes
   
3. Check your email for the verification code or your authenticator app, depending on your method
4. Enter the verification code
5. Click Regenerate codes
6. Download and securely save your new recovery codes

Changing your MFA method

You can change your MFA method from email verification to an authenticator app, or from an authenticator app to email verification in your security settings.

To change your MFA method:

1. Go to Profile > Security
2. Click Change MFA method
   
3. Enter the verification code sent to your email or your authenticator app, depending on your method
4. Click Start method change
5. Follow the instructions to set up your new MFA method

Once you have changed your MFA method, you will need to use the new method to generate a verification code to log in again.

Disabling MFA

If you no longer want to use MFA, you can disable it from your Security settings.

To disable MFA:

1. Go to Profile > Security
2. Click Disable MFA
   
3. Enter the verification code sent to your email or your authenticator app, depending on your method
4. Click Disable MFA
5. You'll be redirected to the GuestRevu login screen
6. Log in again using your username and password

MFA will no longer be required when you log in.

Logging in with MFA

Once MFA is enabled, you'll need to complete an additional verification step when logging in.

After entering your username and password:

• Email verification: Check your email for your verification code and enter the code when prompted.
• Authenticator app: Open your Authenticator app, generate a new six-digit code and enter it when prompted.
• Recovery code: If you can't access your usual MFA method, you can use one of your recovery codes.

Keep your recovery codes somewhere secure and make sure you can access them if you need them.