Multi-Factor Authentication (MFA)

Multi-Factor Authentication (MFA) adds an extra layer of protection to your CPDForge AI account. When you log in, you provide two pieces of information:

• Your password — something you know.
• A one-time code — something you have, generated by an app on your phone.

Even if someone discovers your password, they cannot access your account without the one-time code.

• Protects your account even if your password is stolen or guessed.
• Keeps your organisation's training records secure.
• Safeguards learner data and personal information.
• Reduces the risk of unauthorised access.
• Meets modern security expectations for professional platforms.

CPDForge AI works with any standard authenticator app that supports time-based one-time passwords (TOTP).

1. Log in to your CPDForge AI account.
2. Click the Enable MFA button in the banner at the top of the dashboard, or navigate to the Two-Factor Authentication page.
3. Click Enable MFA.
4. A QR code will appear. Open your authenticator app and scan it. (If you cannot scan, see Manual Setup Key.)
5. Your authenticator app will show a 6-digit code. Enter it into the verification field.
6. Click Verify to complete setup.
7. Save the recovery codes shown. They are displayed only once. See Recovery Codes.
8. MFA is now active. From your next login, you will need your password and a 6-digit code.

Step 1 — Install the App

1. Open the App Store (iPhone) or Google Play Store (Android).
2. Search for Microsoft Authenticator.
3. Tap Install and open the app.

Step 2 — Add Your CPDForge AI Account

1. In the app, tap the + icon to add a new account.
2. Select Other account (Google, Facebook, etc.).
3. The app will open the camera to scan a QR code.

Step 3 — Scan and Verify

1. Point your phone at the QR code on the CPDForge AI screen.
2. Microsoft Authenticator will add CPDForge AI to your account list.
3. Enter the 6-digit code shown in the app into CPDForge AI.
4. Click Verify. MFA is now active.

Step 1 — Install the App

1. Open the App Store (iPhone) or Google Play Store (Android).
2. Search for Google Authenticator.
3. Tap Install and open the app.

Step 2 — Add Your CPDForge AI Account

1. In Google Authenticator, tap the + icon at the bottom.
2. Select Scan a QR code.

Step 3 — Scan and Verify

1. Point your phone at the QR code on the CPDForge AI screen.
2. Google Authenticator will add CPDForge AI automatically.
3. Enter the 6-digit code into CPDForge AI and click Verify.

Apple Passwords is built into iPhones, iPads, and Macs. There is nothing to download. It also supports auto-fill in Safari.

On iPhone or iPad

1. Open Settings and tap Passwords.
2. Authenticate with Face ID, Touch ID, or your passcode.
3. Find your CPDForge AI entry (or tap + to add one).
4. Tap Set Up Verification Code.
5. Select Scan QR Code and point your camera at the QR code on CPDForge AI.
6. Return to CPDForge AI and enter the 6-digit code shown in Apple Passwords.
7. Click Verify.

If your device cannot scan a QR code — for example, because you are setting up the authenticator on the same device — you can add your account manually using the setup key displayed next to the QR code.

1. On the CPDForge AI MFA setup screen, find the setup key displayed next to the QR code. Use the copy button to copy it.
2. Open your authenticator app and choose Enter a setup key (or similar).
3. Enter the following:
   • Account name: CPDForge AI (or your email address)
   • Key: Paste the setup key
   • Type: Time-based (TOTP)
4. Tap Add or Save.
5. Enter the 6-digit code into CPDForge AI and click Verify.

When you enable MFA, you receive 10 single-use recovery codes. Each code works once. If you lose your phone or authenticator app, these are your backup to regain access.

How to store them securely

• Print them and store in a secure location.
• Save them in a secure password manager.
• Do not store them only on your phone.
• Do not store them in an email inbox or unprotected document.

Getting new recovery codes

To generate fresh recovery codes: disable MFA from the Two-Factor Authentication page, then re-enable it. A new set of 10 codes will be generated during the setup process.

Before contacting support, check:

• Do you have your recovery codes saved in a password manager or printed?
• Can you still access your old device (even briefly)?
• Does your authenticator app sync across devices? (1Password does.)

Re-enrolling MFA After Regaining Access

1. Sign in to CPDForge AI.
2. Go to the Two-Factor Authentication page.
3. Click Enable MFA and follow the setup steps again.
4. Save your new recovery codes in a secure place.

• Never share your MFA code with anyone. CPDForge AI support will never ask for it.
• Never share your recovery codes. Treat them like a password.
• Use a strong, unique password for your CPDForge AI account.
• Keep your authenticator app up to date.
• Enable MFA as soon as your account is created.
• Lock your phone automatically after a short period of inactivity.
• If you suspect unauthorised access, change your password immediately and contact your administrator.