Credentials

The Credentials Settings page lets you manage your login email, password, and authenticator-app multi-factor authentication.

Accessing Credentials

1. Open Settings
2. Toggle to User Settings using the switch at the top of the settings sidebar
3. Click Credentials

Overview

Account security is crucial for protecting your organization's data and maintaining user privacy. The Credentials Settings page provides tools to:

• Update your login email
• Change your password
• Set up authenticator-app multi-factor authentication
• Remove existing MFA factors

Email Management

Your email address serves as your primary login credential and contact channel.

Updating Your Email

To change your account email:

1. Enter your new email address
2. Repeat the new email address to confirm it
3. Click "Update Email"
4. Check your new email for a verification message
5. Click the verification link to confirm the change
6. Your email will be updated once verified

Important Notes

• You'll need access to the new email address to complete verification
• Your old email will receive a notification of the change
• You'll use the new email for all future logins
• Any pending password reset links will be invalidated

Password Management

Regular password updates help maintain account security.

Changing Your Password

To update your password:

1. Enter your new password
2. Re-enter the new password to confirm it
3. Click "Update Password"

Passwords must be at least 8 characters. If your session requires a fresh login before changing the password, PawPlacer shows a reauthentication message.

Password Best Practices

• Use unique passwords for each service
• Avoid common words or personal information
• Consider using a password manager
• Update passwords regularly
• Never share your password

Multi-Factor Authentication (MFA)

MFA provides an additional security layer beyond passwords, significantly reducing unauthorized access risks.

Supported MFA Method

PawPlacer currently supports authenticator-app MFA using time-based one-time passwords (TOTP). SMS, backup codes, and hardware security keys are not exposed on this settings page.

Setting Up MFA

To enable multi-factor authentication:

1. Click "Set Up MFA" in the Multi-Factor Authentication section
2. Enter a friendly name for the factor, such as the device or app name
3. Scan the QR code with your authenticator app
4. Enter the 6-digit code from the app
5. Click the enable button to verify and activate the factor

Managing MFA Factors

Once MFA is enabled, you can:

View Active Factors

See each enrolled factor's name, type, and status.

Add More Authenticator Factors

Add additional TOTP factors, up to the current factor limit.

Remove Factors

Disable specific authenticator factors when:

• Changing phones
• Switching authenticator apps
• Updating security preferences

Using MFA

With MFA enabled, logging in requires:

1. Enter your email and password
2. When prompted, provide the 6-digit code from your authenticator app

Troubleshooting MFA

Lost Phone or Authenticator

If you can't access your primary MFA method:

1. Use another enrolled authenticator factor if you have one
2. Access Credentials Settings
3. Remove the lost factor
4. Set up a new authenticator factor
5. Contact support if you cannot sign in with any factor

Codes Not Working

If your authenticator codes are rejected:

• Ensure your device's time is synchronized
• Try the next code if one just expired
• Use another enrolled authenticator factor if one is available
• Contact support for assistance

Account Recovery

If you're completely locked out:

1. Contact your organization administrator
2. Contact PawPlacer support if administrator help is not enough
3. Be prepared to verify your identity

Security Recommendations

Strong Security Practices

1. Enable MFA - Always use multi-factor authentication
2. Regular Updates - Change passwords periodically
3. Unique Passwords - Don't reuse passwords across services
4. Secure Storage - Use a password manager
5. Stay Alert - Report suspicious activity immediately

Warning Signs

Watch for these security concerns:

• Unexpected login notifications
• Password change emails you didn't request
• Unusual account activity
• MFA prompts you didn't trigger

Report any suspicious activity to your administrator immediately.

Account Recovery

If you lose access to your account:

1. Self-Recovery - Use password reset if you have email access
2. MFA Recovery - Use another enrolled authenticator factor if one is available, or contact your admin
3. Administrator Help - Your organization admin can assist with recovery
4. Identity Verification - Be prepared to verify your identity

Support

For security-related assistance:

• Review this documentation first
• Contact your organization administrator
• For urgent security issues, contact support immediately
• Never share credentials in support messages