To enhance account security, Qualified requires two-factor authentication (2FA) for users who log in using an email and password.
About two-factor authentication
Two-factor authentication (2FA) adds an extra layer of security to your Qualified account. When this feature is active, users signing in with an email and password must complete a second step: entering a one-time verification code sent to their registered email address.
This requirement applies only to users who sign in with an email and password. If you sign in with Single Sign-On (SSO) or with your Google or Microsoft account, your sign-in flow stays the same.
Enabling 2FA
This security update is a requirement and has been enabled for all organizations since March 2, 2026.
Each time a user signs in with their email and password, they are prompted to provide a one-time password (OTP).
User experience
The login process for password users follows these steps:
-
Sign in: Enter your email and password as usual.
-
Receive code: An email containing a 6-digit verification code will be sent to your inbox. This code is valid for 10 minutes.
-
Verification: Enter the 6-digit code on the OTP step of the sign-in flow.
-
Access: Upon successful verification, you will be signed into the Qualified platform.
If you do not receive the code or if it expires, you can request a new one by selecting the resend option. Please be aware that verification and resend attempts are rate-limited to ensure platform security.
Managing active sessions
Enabling 2FA will not automatically log out users who are currently signed in. Existing sessions will remain active until the user logs out or attempts to sign in from a new browser or device.
Sign-in frequency
For maximum security, an OTP is required for every sign-in attempt. At this time, Qualified does not offer a "trust this device" or a 30-day exemption period.
If you have questions regarding your login configurations or security settings, please reach out to your Qualified Success Architect (QSA) for more information.
.svg)
