What is Multi-Factor Authentication?
Multi-Factor Authentication (MFA), also sometimes known as Two-Factor Authentication (2FA), is an extra layer of security added to a standard login process.
As GovernorHub holds lots of sensitive data many boards like to add extra security as fortification against malicious login attempts.
GovernorHub offers optional MFA for all users. Ours is administered through a time-based one-time password (TOTP) which involves you providing a 6 digit confirmation code generated by a separate authenticator app on your phone each time you log in to GovernorHub.
Why might I need to disable my MFA settings?
You will need to reset your MFA settings if, after setting it up, you change/lose the device you used to generate your code or you want to set up a new authenticator app. You will also need to disable MFA if you are being asked for a 6 digit code when signing in but haven't set up the accompanying authenticator app that generates the code.
If you have access to your account, you can disable your own MFA settings at any time by following the steps below.
If you don’t have access to your GovernorHub account, you will need the help of one of your board admins.
As MFA is designed to stop malicious attempts to access your account, only the admin on your board will be able to disable this for you. GovernorHub will not be able to disable your MFA settings for you.
How to disable MFA
If you have access to your GovernorHub account, you can disable MFA following the instructions below, in place of the admin.
If you don’t have access to your account, any admin on your board can disable MFA safely for you by sending you a disable email from GovernorHub.
Admins are usually the board clerk but can also include other users of the account. Your clerk will be able to let you know who the admins are, if needed. If you don’t have your clerk’s contact details, ask your school team.
Go to your profile area. An admin can access this by going to the Current members page and clicking the downward arrow next to the user. You then need to click on the View full profile option.
Once in the profile area, click on the Admin tab.
This area shows you when MFA was set up on the account and if any boards require MFA to be set up.
Select the Send disable MFA email under the Multi-Factor Authentication (MFA) section.
Clicking on this will cause a pop up to appear that asks Send Disable MFA Email?
Click Send and an email to disable the MFA settings on the account will be sent to the user.
The user will receive an email link to disable MFA on their account.
Please note that, for security, the link in the disable email will only be valid for twelve hours after sending and can only be clicked once.
If the link has been clicked more than once or it’s been more than twelve hours, you’ll need to request another disable MFA email from your admin.
When you’ve received the email titled GovernorHub Security Request, you need to click on the link Disable my MFA.
This link will take you to GovernorHub where you need to select the Disable 2FA option.
Your MFA settings will now be disabled on your account. To continue through to the site, select the All done – go to GovernorHub button.
Next Steps
Following the steps described above will enable you to sign in without MFA from now on. You can now sign in using your email and password. If, however, you wish to set up MFA again (such as with a new device) follow our setting up multi-factor authentication (MFA) instructions.
If your board has turned on enforced MFA, this means that anyone on the account must have MFA enabled. You will be required to set this back up again when you next log in.
My board has enforced MFA
If your board has set up mandatory MFA for all users on the account then you will be required to set up MFA again when you next sign in to GovernorHub.
You will see a pop up explaining that your board has enforced MFA when you next log in if MFA is mandatory for your board.
Click on the Setup TOTP button.
You’ll be shown a QR code to scan in your authenticator app. We recommend Google Authenticator.
If you don’t have an authenticator app downloaded already, you will need to download one.
Scan the QR code in your authenticator app.
Please do not scan this QR code in the screenshot below as this will not work. You need your own individual QR code generated from your GovernorHub log in.
Your authenticator app will then provide you with a 6 digit code for GovernorHub. Enter this code into the code box in the GovernorHub pop up.
The Verify button will then turn blue.
Click the Verify button.
Once you have set up MFA back onto your account, you will be shown the Ways you can currently sign in to GovernorHub.
Click on the Go to GovernorHub button to access your account.
You will then be sent to your GovernorHub account.