What happens if I lose or replace the device where MFA is configured?

Procore MFA: Regional Availability for SMS Verification

Procore supports Authenticator apps everywhere. SMS Verfication is only available in these countries Show/Hide Details

SMS Verification is available in these countries.

  • Note: SMS Verification for Procore Pay (Payees) is limited to the United States.

    • US

    • Canada

    • Mexico

    • UK

    • Ireland

    • France

    • Germany

    • Spain

    • Italy

    • Australia

    • New Zealand

    • Singapore

    • Hong Kong

Strengthen Your Security: Procore MFA

Multi-Factor Authentication (MFA)—also referred to as Two-Factor Authentication (2FA)—is being rolled out to limited Procore commercial accounts. While MFA is mandatory for Procore Pay users, MFA is available on a limited basis to commercial accounts to provide our customers an extra layer of security. To enable MFA for your organization, ask your Procore Administrator to contact your Procore point of contact.

Answer

If you no longer have access to the device you use for Multi-Factor Authentication (MFA), follow the steps below based on your situation.

1. If You Have Your Recovery Code

When you first set up MFA, you were provided a unique Recovery Code.

  1. Open the Procore login page.

  2. Select the option to enter your recovery code instead of the MFA token.

  3. Once logged in, you can re-configure MFA on your new device.

2. If You Do Not Have Your Code

If your device is gone and you don't have your recovery code, you must contact your Procore Administrator.

  • The Process: If your company is using Procore's MFA solution, your Admin can typically manually reset the MFA requirements for your account. For details, see Who is responsible for resetting MFA for a user?

  • Identity Verification: For security reasons, your Admin must verify your identity using your company’s approved verification process before granting access.

  • Setup: Once reset, you will be prompted to set up MFA from scratch the next time you log in.

Proactive Tips to Avoid Being Locked Out

To avoid being locked out in the future, consider these best practices:

  • Store Your Recovery Code Safely: Keep the recovery code that you initially receive when setting up MFA in a secure digital or physical location separate from your phone.

  • Use Multiple Devices: If your Authenticator app (e.g., Okta Verify, Google Authenticator) allows it, configure MFA on a backup device like a tablet.

  • Sync to Cloud: Some apps offer encrypted cloud backup. If your company's IT policies allow it, enabling this feature makes transitioning to a new phone seamless.

See Also

Loading related articles...