Why This Matters

Multi-Factor Authentication (MFA) adds an extra layer of protection to employee logins by requiring a one-time code from an authenticator app or email in addition to a password. This helps prevent unauthorized access in case of a compromised password or stolen device. MFA is available for employees (Admins, Managers, Coaches, Staff), not clients/members.

See a breakdown below of how to authenticate by either Google Authenticator or Email verification.

Pre-requisite Pro-Tip

Your user must have an employee role (Admin, Manager, Coach, or Staff).

Note: If you’re setting this up because you lost a device or suspect access issues, use Forget All Devices after MFA is enabled to force re-authentication on trusted devices.

1. How to Set Up Google Authenticator

In Wodify, navigate to:

1. Sign in
2. Choose Verify your identity
3. Click Google Authenticator

Follow the enable MFA Wizard:

1. Download app 
   • Apple App Store
   • Google Play Store
2. Open Google Authenticator on your phone.
3. Add a new account by scanning the QR code shown in Wodify.
4. Enter the 6-digit code from Google Authenticator into Wodify to confirm.

To confirm this worked:

1. Log out of Wodify.
2. Log back in.
3. When prompted, enter the current code from Google Authenticator.

Save/Optional Settings:

1. If you trust the device, select Remember me for 90 days during login to reduce MFA prompts.
2. (Optional but recommended) In Secure Devices, confirm your device appears as trusted.

2. How to Use Email MFA

1. Sign In
2. Click Email a Code to [your email address]
3. Open your inbox to locate the email sent containing a 6-digit code
4. Enter the 6 digit Verification Code (see below)
5. Click Verify (or resend code if necessary)

Recommended Team Rollout (Optional)

• Enable MFA in Global Settings
• Ask all employees to configure MFA the same day.
• After rollout, use Forget All Devices only if a device is lost/stolen or you suspect unauthorized access (it will sign users out of remembered devices).

Enabling MFA for Your Team

In Wodify, navigate to Global Settings

Enable MFA Requirement:

1. Toggle MFA to Enabled
2. Choose who MFA applies to by selecting the specific roles (Manager, Coach, Staff)
3. Toggle on (Please note: admins are all required to use MFA)
4. Click Save (or Update Settings) in Global Settings

Note: Communicate next steps to your team: Send them this article so they can get setup using the steps above!

FAQs

1. “I don’t see this option.” Answer: You can confirm that your profile has an employee role such as Admin, Manager, Coach, or Staff. Confirm that the role is enabled for MFA in global settings
2. "My MFA code isn’t working." Answer: Make sure you’re using the code for the correct Wodify entry in Google Authenticator. Always try the newest code as it rotates frequently! Additionally, ensure your phone’s time is set to update automatically (if you have set a custom time on your phone, this will block mfa). If it still fails, request an MFA reset from your Admin
3. "I lost my phone - how do I log in?" Answer: Contact another admin in your business to request an MFA reset for your user. If you are the only Admin, contact Support to regain access. After access is restored, immediately Reconfigure MFA by signing back in from a trusted device and following the steps outlines above.
4. "Do I have to do this?" Answer: This is a requirement for all admins.
5. "I can't find the code in my email." Answer: Check your spam folder! It's most likely hiding in there.
6. "I don't see my code in my google authenticator app!" Answer: Contact another admin in your business to request an MFA reset for your user. If you are the only Admin, contact Support to regain access.