🔐 Multi-Factor Authentication (MFA)

Google Authenticator (TOTP)

LEO Awards Submission System
Enable with Google Authenticator Disable MFA Troubleshooting

What is MFA?

MFA adds a second step to sign-in. After your password, you enter a 6-digit code from your phone. This prevents unauthorized access even if a password is compromised.

Works with Google Authenticator and other TOTP apps (Authy, 1Password, Microsoft Authenticator, etc.).

FAQ & Tutorials

  1. Click Show User Settings at the top of the submission page.
  2. Scroll to Security & MFA (status shows Disabled).
  3. Click Enable with Google Authenticator.
  4. A QR code and Manual Key will appear:
    • Scan: Open your Authenticator app → tap + → Scan a QR code.
    • Manual: Choose Enter a setup key and type the key shown.
  5. Enter the 6-digit code shown in your app into Enter 6-digit code, then click Verify & Enable.
After success: Status changes to Enabled and your 10 one-time Backup Codes are displayed. Copy or download them and store safely.
Manual key:
MCF7 OYGA JJ4U GJRS E2BC MZLD YP23 IGLP

  • After enabling MFA, you’ll see 10 one-time backup codes.
  • Use each code once if you can’t access your authenticator app.
  • Store them securely (password manager or printed copy kept safe).
If you lose your phone and don’t have backup codes, contact LEO Awards support to verify your identity and reset MFA.

  1. Enter your email and password as usual.
  2. When prompted, open your authenticator app.
  3. Type the current 6-digit code and click Continue.

  • Disable MFA: Turns off protection. You’ll be asked to confirm with a valid 6-digit code. We recommend keeping MFA enabled unless you’re moving to a new phone.
Disable MFA

  1. Before replacing your phone: Go to Show User Settings → Security & MFA and click Disable MFA.
  2. On your new phone: Click Enable with Google Authenticator and scan the new QR code.

Code not accepted?
  • Ensure your phone’s Date & Time are set automatically.
  • Enter the current 6-digit code (codes change every 30 seconds).
Authenticator app missing?
  • Re-install the app, then sign in with one backup code.
  • Once signed in, re-enable MFA to generate a new QR code.

Can I use a different app?
Yes. Any TOTP-compatible app works (Authy, Microsoft Authenticator, 1Password, etc.).
Are backup codes reusable?
No. Each code can be used once. After use it becomes invalid.
Is MFA required?
Optional for now but strongly recommended. It may become mandatory for certain account types in future releases.

Need help? Contact LEO Awards support: russ@leoawards.com