{"id":4091,"date":"2026-04-17T15:50:59","date_gmt":"2026-04-17T19:50:59","guid":{"rendered":"https:\/\/www.airsupervision.com\/wp-r\/docs\/administrator\/multi-factor-authentification\/"},"modified":"2026-04-17T17:31:26","modified_gmt":"2026-04-17T21:31:26","slug":"multi-factor-authentification","status":"publish","type":"docs","link":"https:\/\/www.airsupervision.com\/wp-r\/docs\/administrator\/multi-factor-authentification\/","title":{"rendered":"Multi Factor Authentification"},"content":{"rendered":"\n

MFA Help for Protected Admin Pages<\/strong><\/h2>\n\n\n\n
\"\"
MFA verification page opened before access to a protected admin page<\/figcaption><\/figure>\n\n\n\n

This guide explains how Multi-Factor Authentication (MFA) works when you open protected administration pages in AirSupervision.<\/p>\n\n\n\n

MFA adds one extra security step after your normal sign-in. In addition to your username and password, you must enter a temporary 6-digit code from an authenticator app on your phone.<\/p>\n\n\n\n

Supported authenticator apps include:<\/p>\n\n\n\n

    \n
  • Google Authenticator<\/li>\n\n\n\n
  • Microsoft Authenticator<\/li>\n\n\n\n
  • Authy<\/li>\n<\/ul>\n\n\n\n

    What MFA protects<\/strong><\/h2>\n\n\n\n
    \"\"
    Example protected admin page entry<\/figcaption><\/figure>\n\n\n\n

    MFA is used on sensitive administration areas and related actions. Depending on your access rights, you may be asked to verify when you open pages such as:<\/p>\n\n\n\n

      \n
    • System settings<\/li>\n\n\n\n
    • General settings<\/li>\n\n\n\n
    • Complimentary email center<\/li>\n\n\n\n
    • Users credentials<\/li>\n\n\n\n
    • IT Dashboard<\/li>\n\n\n\n
    • IT Todo center<\/li>\n\n\n\n
    • SQL search<\/li>\n<\/ul>\n\n\n\n

      You can also be asked to verify again when a protected background action is triggered from one of these areas.<\/p>\n\n\n\n

      Important: MFA verification is remembered only for your current login session. After you sign out and sign back in, you must verify again the next time you open a protected page.<\/p>\n\n\n\n

      When the MFA page appears<\/strong><\/h2>\n\n\n\n

      When AirSupervision needs extra confirmation, it opens the MFA verification page before giving access to the protected area.<\/p>\n\n\n\n

      On that page you will see:<\/p>\n\n\n\n

        \n
      • a message explaining that MFA is required<\/li>\n\n\n\n
      • a field to enter your current 6-digit code<\/li>\n\n\n\n
      • a Verify<\/strong> button<\/li>\n\n\n\n
      • a Cancel<\/strong> button<\/li>\n<\/ul>\n\n\n\n

        If your MFA is already configured, enter the current code shown in your authenticator app and click Verify<\/strong>. If the code is accepted, AirSupervision sends you back to the protected page you were trying to open.<\/p>\n\n\n\n

        If you click Cancel<\/strong>, AirSupervision returns you to the main page instead of opening the protected area.<\/p>\n\n\n\n

        First-time setup<\/strong><\/h2>\n\n\n\n
        \"\"
        First-time MFA setup screen<\/figcaption><\/figure>\n\n\n\n

        The first time MFA is required for your account, you must connect your authenticator app before you can continue.<\/p>\n\n\n\n

        Step 1: Add the account to your authenticator app<\/h3>\n\n\n\n

        On the MFA page:<\/p>\n\n\n\n

          \n
        1. Open your authenticator app on your phone.<\/li>\n\n\n\n
        2. Choose the option to add a new account.<\/li>\n\n\n\n
        3. Scan the QR code shown on screen.<\/li>\n\n\n\n
        4. If needed, use the manual setup key shown below the QR code.<\/li>\n<\/ol>\n\n\n\n

          If you use your authenticator app for many different systems, look for the AirSupervision entry created for your account. The label includes your company name together with AirSupervision.<\/p>\n\n\n\n

          Step 2: Confirm the setup<\/h3>\n\n\n\n

          After scanning the QR code:<\/p>\n\n\n\n

            \n
          1. Wait for the app to show a 6-digit code.<\/li>\n\n\n\n
          2. Enter that code in the confirmation field.<\/li>\n\n\n\n
          3. Click Verify<\/strong>.<\/li>\n<\/ol>\n\n\n\n

            If the code is correct, MFA becomes active immediately and AirSupervision opens the protected page you originally requested.<\/p>\n\n\n\n

            Generate a different QR code before confirming<\/h3>\n\n\n\n
            \"\"
            Generate a new QR code button used before final confirmation of the first MFA setup<\/figcaption><\/figure>\n\n\n\n

            If you scanned the wrong app, want to restart the setup, or prefer to create a fresh entry, click Generate a new QR code<\/strong>.<\/p>\n\n\n\n

            Use this only before final confirmation. Once you generate a new QR code, the previous unconfirmed QR code should no longer be used.<\/p>\n\n\n\n

            Daily use after setup<\/strong><\/h2>\n\n\n\n
            \"\"
            Standard MFA sign-in step for an already configured account<\/figcaption><\/figure>\n\n\n\n

            Once MFA is configured, the daily process is simple:<\/p>\n\n\n\n

              \n
            1. Open a protected admin page.<\/li>\n\n\n\n
            2. Open your authenticator app.<\/li>\n\n\n\n
            3. Read the current 6-digit code.<\/li>\n\n\n\n
            4. Enter it on the MFA page.<\/li>\n\n\n\n
            5. Click Verify<\/strong>.<\/li>\n<\/ol>\n\n\n\n

              After successful verification, you can continue working in that protected area during the current login session.<\/p>\n\n\n\n

              Reset MFA and connect a new phone<\/strong><\/h2>\n\n\n\n

              Use the reset option when:<\/p>\n\n\n\n

                \n
              • you changed phone<\/li>\n\n\n\n
              • you removed the AirSupervision entry from your authenticator app<\/li>\n\n\n\n
              • your codes are no longer accepted<\/li>\n\n\n\n
              • you want to rebuild the MFA setup from scratch<\/li>\n<\/ul>\n\n\n\n

                How reset works<\/strong><\/h3>\n\n\n\n
                \"\"
                MFA reset confirmation dialog warning that the current authenticator entry will stop working immediately.<\/figcaption><\/figure>\n\n\n\n

                When your MFA is already active, the MFA page shows a Reset MFA and Generate New QR Code<\/strong> button.<\/p>\n\n\n\n

                To reset:<\/p>\n\n\n\n

                  \n
                1. Click Reset MFA and Generate New QR Code<\/strong>.<\/li>\n\n\n\n
                2. Read the confirmation message carefully.<\/li>\n\n\n\n
                3. Enter your current password in the confirmation window.<\/li>\n\n\n\n
                4. Confirm the reset.<\/li>\n<\/ol>\n\n\n\n

                  What happens next:<\/p>\n\n\n\n

                    \n
                  • the current authenticator entry stops working immediately<\/li>\n\n\n\n
                  • a new QR code is generated<\/li>\n\n\n\n
                  • you must scan the new QR code<\/li>\n\n\n\n
                  • you must enter a new 6-digit code to complete the setup again<\/li>\n<\/ul>\n\n\n\n

                    If a mobile number is available on your account, AirSupervision may also send a warning SMS to let you know an MFA reset was requested.<\/p>\n\n\n\n

                    Important: if the current password is incorrect, the reset is refused.<\/p>\n\n\n\n

                    Validation rules and common blocking situations<\/strong><\/h2>\n\n\n\n
                    \"\"
                    Example validation or error message shown above the MFA form after an invalid code entry<\/figcaption><\/figure>\n\n\n\n

                    AirSupervision applies several checks to avoid accidental or unsafe validation.<\/p>\n\n\n\n

                    The code must be 6 digits<\/h3>\n\n\n\n

                    Only numeric 6-digit codes are accepted.<\/p>\n\n\n\n

                    The code must be current<\/h3>\n\n\n\n

                    Authenticator codes change regularly. If the code has just changed, enter the newest one shown in the app.<\/p>\n\n\n\n

                    A code cannot be reused<\/h3>\n\n\n\n

                    If a code was already accepted, you cannot use that same code again. Wait for the next code to appear in your authenticator app, then try again.<\/p>\n\n\n\n

                    Too many invalid attempts cause a temporary lock<\/h3>\n\n\n\n

                    After 5 invalid codes in a row, AirSupervision temporarily locks MFA verification for 10 minutes.<\/p>\n\n\n\n

                    When this happens, the page shows the time when you can try again.<\/p>\n\n\n\n

                    Troubleshooting<\/strong><\/h2>\n\n\n\n

                    I scanned the QR code but verification fails<\/h3>\n\n\n\n

                    Try these checks:<\/p>\n\n\n\n

                      \n
                    • make sure you scanned the latest QR code<\/li>\n\n\n\n
                    • make sure you are entering the code for the AirSupervision account, not another site<\/li>\n\n\n\n
                    • wait for the next code refresh and try again<\/li>\n\n\n\n
                    • if needed, restart with Generate a new QR code<\/strong><\/li>\n<\/ul>\n\n\n\n

                      I changed phone and no longer have the old MFA entry<\/h3>\n\n\n\n

                      Use the reset option and reconnect the account on your new phone.<\/p>\n\n\n\n

                      I entered several wrong codes and now I am blocked<\/h3>\n\n\n\n

                      Wait until the lock period ends, then try again with the newest code shown by your authenticator app.<\/p>\n\n\n\n

                      I reset MFA but the old app entry still exists on my phone<\/h3>\n\n\n\n

                      Delete or rename the old entry on your phone so you do not accidentally use the wrong code later.<\/p>\n\n\n\n

                      I can sign in to AirSupervision but not open a protected admin page<\/h3>\n\n\n\n

                      This usually means the normal login succeeded, but MFA verification is still required for that protected area. Complete the MFA step to continue.<\/p>\n\n\n\n

                      Recommended good practice<\/strong><\/h2>\n\n\n\n
                        \n
                      • Keep your authenticator app on a device you control personally.<\/li>\n\n\n\n
                      • Do not share MFA codes.<\/li>\n\n\n\n
                      • After changing phone, reset MFA promptly instead of keeping an outdated entry.<\/li>\n\n\n\n
                      • If you receive an unexpected MFA reset warning, contact an administrator immediately.<\/li>\n\n\n\n
                      • When working in several protected admin pages, finish your MFA verification before starting major changes.<\/li>\n<\/ul>\n\n\n\n

                        Quick summary<\/strong><\/h2>\n\n\n\n

                        MFA is an extra protection for sensitive admin pages. The first time, scan the QR code and confirm with a 6-digit code. After that, enter the current code whenever AirSupervision asks for it in a new login session. If you change phones or lose access to the app, reset MFA, scan the new QR code, and confirm the setup again.<\/p>\n","protected":false},"featured_media":0,"parent":64,"menu_order":0,"template":"","doc_tag":[],"_links":{"self":[{"href":"https:\/\/www.airsupervision.com\/wp-r\/wp-json\/wp\/v2\/docs\/4091"}],"collection":[{"href":"https:\/\/www.airsupervision.com\/wp-r\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/www.airsupervision.com\/wp-r\/wp-json\/wp\/v2\/types\/docs"}],"version-history":[{"count":12,"href":"https:\/\/www.airsupervision.com\/wp-r\/wp-json\/wp\/v2\/docs\/4091\/revisions"}],"predecessor-version":[{"id":4122,"href":"https:\/\/www.airsupervision.com\/wp-r\/wp-json\/wp\/v2\/docs\/4091\/revisions\/4122"}],"up":[{"embeddable":true,"href":"https:\/\/www.airsupervision.com\/wp-r\/wp-json\/wp\/v2\/docs\/64"}],"next":[{"title":"AirSupervision settings","link":"https:\/\/www.airsupervision.com\/wp-r\/docs\/administrator\/airsupervision-settings\/","href":"https:\/\/www.airsupervision.com\/wp-r\/wp-json\/wp\/v2\/docs\/107"}],"wp:attachment":[{"href":"https:\/\/www.airsupervision.com\/wp-r\/wp-json\/wp\/v2\/media?parent=4091"}],"wp:term":[{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/www.airsupervision.com\/wp-r\/wp-json\/wp\/v2\/doc_tag?post=4091"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}