What is 2FA?

• 2FA adds an extra layer of security to your account and is a mandatory requirement to set up either:

  • Authenticator App 2FA (use an app like Microsoft Authenticator), or

  • SMS 2FA (receive a code via text message)

• You must complete 2FA setup to access the Applicant Portal

Setting up 2FA

• New users will set up 2FA as part of registration

• Complete the registration form and after submission you’ll see a screen to choose your 2FA method:

  • Click Authenticator to set up an Authenticator App

  • Click SMS to set up SMS 2FA

• Click on the option you wish to set up and follow the relevant section below

Authenticator 2FA setup

• Click Authenticator on the 2FA options screen

• Open your Authenticator app (eg Microsoft Authenticator):

  • Scan the QR code or enter the Manual Entry Key

  • Follow the app’s instructions

  • Enter the code generated by the app and click Verify & Enable

• You can also click Back to return to the 2FA options page if you wish to change the 2FA method

• After setup, you’ll see your 2FA Backup Code

SMS 2FA setup

• Click SMS on the 2FA options screen

• A Mobile Number will be entered from your registration form.  You can overwrite this if needed which will also update your phone number on your profile

• Click Resend if you've updated the mobile number or if you haven’t received the code within 5 minutes
• You can also click Back to return to the 2FA options page if you wish to change the 2FA method
• Once you receive the code via SMS, enter it and click Confirm.
• After confirming, you’ll see your 2FA Backup Code

Logging in with 2FA

After 2FA is set up, each login will require the configured method of 2FA:

• The code from your Authenticator app, or

• The SMS code

Tip: To skip the 2FA step when logging in on the same device and browser, tick the Remember this device? checkbox before clicking Submit. This will remember the device and browser for 7 days, so you can bypass 2FA during that time.

If you don't have access to your phone to log in

• If you're not able to use your phone then you can use your Recovery Code to log in

• Or, click Help on the 2FA page to view support contact details

Changing your 2FA setup in Account Settings

• Once logged in, you can change your 2FA settings by clicking on the Welcome dropdown next to your name in the menu and Account Settings

• Click on the 2FA Settings tab to change your configuration - the warning explains that any changes will remove your existing setup and you will need to set it up again

• Register a new Authenticator:
  Click Register Authenticator to generate a new QR code and key. Enter the code from your app and click Verify. Note this will replace your current authenticator

• Reconfigure SMS 2FA:
  Click Generate Code to receive a new SMS code to the mobile number in your Personal Details tab (you can amend this first if needed). Enter the code and click Verify

• Generate a new Recovery Code: If you've lost your 2FA backup code then click Generate Code under the Recovery Code section

• Clicking on the SMS button while on the Recovery Code page will take the user back to the SMS Authenticator Code page

• Clicking on the Help button will make the support contact information (the same one the Recruiters see in the Recruiter portal) visible

Note: Depending on which option you previously configured you'll see an option to swap to the other method: Use Authenticator or Use SMS.  Clicking this allows you to set up the alternative method. The example below shows a user who had previously set up Authenticator, clicking Use SMS to set up the text message verification instead.

Further help

• Clicking on the Help button will make the support contact information (the same one the Recruiters see in the Recruiter portal) visible

• Admin users will have the ability to reset Applicant accounts' 2FA settings via the admin portal - see linked guide for more details