Understanding Multi-Factor Authentication in EveryAction
Multi-Factor Authentication Overview
Multi-Factor Authentication (MFA) adds a second layer of security to your EveryAction login. After you enter your Bonterra Account email and password, you'll verify your identity using a code sent to your phone or generated by an authenticator app. This extra step keeps your account protected even if your password is ever guessed or stolen.
Protecting your organization's data is one of the most important parts of working with a database like EveryAction. MFA is one of the most effective ways to prevent unauthorized access — and the more sensitive the data or tasks a user can reach, the more important it becomes. Setting up MFA once means you're protecting every login from that point forward.
For most users, MFA becomes a quick, routine part of signing in — typically once every 30 days per device, or whenever you sign in from a new browser or device. Administrators can also require MFA for entire groups of users through User Profile settings, so the whole team is covered without any manual back-and-forth. MFA settings are managed through the Bonterra Account Center.
Use the articles below to set up MFA for your own account, download your recovery code, or require MFA for your team.
What This Feature Helps You Do
- Protect your account from unauthorized access even if your password is compromised
- Keep donor, constituent, and organizational data secure
- Meet security expectations for users who handle sensitive information or tasks
- Require consistent login security across your team without configuring each user one by one
How This Feature Supports Your Work
| What the Feature Does | Why It Helps You | Real-World Use Case |
|---|---|---|
| Requires a verification code at every login | Prevents unauthorized access even if a password is guessed or stolen | A staff member's password is compromised — MFA stops the bad actor from getting in |
| Sends a code to your phone or via an authenticator app | Gives you a flexible, familiar way to verify your identity | A coordinator uses an authenticator app to complete their login quickly each morning |
| Provides a recovery code as a backup | Ensures you always have a way to log in if your device isn't available | A volunteer is traveling without their usual device and logs in using their stored recovery code |
| Can be required at the User Profile level | Lets administrators enforce security standards for entire groups of users at once | An admin requires MFA for all users with access to donor records |
Is This Feature Right for Me?
- You access sensitive data such as donor profiles, scores, or financial records
- You perform tasks like sending emails, importing data in bulk, or exporting records
- You are an administrator responsible for your organization's account security
Feature Availability
- Available to all EveryAction users with a Bonterra Account
- Can be set up by individual users, or required by an administrator at the User Profile level
- Strongly recommended for all users; most important for users with access to sensitive data or elevated permissions
- Existing MFA settings at both the user profile and committee level carry over automatically to the Bonterra Account login experience — no action is required from site admins or users
Not quite what you were searching for?
Navigate back to the User Access Resource Index.
What is Multi-Factor Authentication in EveryAction? | How does MFA protect my EveryAction account? | Why should I use Multi-Factor Authentication in EveryAction? | Who should enable MFA in EveryAction? | How do I make MFA required for my team in EveryAction? | What is a Bonterra Account in EveryAction? | How does Multi-Factor Authentication work with User Profiles in EveryAction?