Client Portal Security & MFA Verification Options
The Firm360 Client Portal uses multi-factor authentication (MFA) to help protect client information and ensure that only authorized users can access the portal.
Clients log in using their email address and a one-time verification code. This code confirms the user’s identity before granting access to the portal.
How Clients Verify Their Identity
After entering their email address, clients must complete a one-time verification step. The verification code can be delivered through one of the following methods:
SMS (text message) sent to the client’s registered mobile phone
Email, when SMS delivery is unavailable or the client prefers email verification
Email verification was introduced as an alternative option because SMS messages may occasionally be delayed or blocked by carriers.
To receive either verification code, the client’s email address and the last four digits of their SSN must match the information stored in their contact record.
Why MFA Is Used
Multi-factor authentication provides an additional layer of protection beyond a username or password. Requiring a verification code helps confirm that the person attempting to log in has access to a trusted device or account.
Is SMS or Email MFA Secure?
Both SMS and email verification methods provide stronger protection than password-only authentication. While each method has potential risks, using MFA significantly improves security compared to relying on a single login credential.
Why the Client Portal Does Not Use Passwords
The Client Portal login design focuses on simplicity and accessibility while maintaining security through MFA. This approach allows clients to access their information without managing additional passwords or complex credentials.
Security Recommendation
For additional protection, clients should enable multi-factor authentication on their personal email accounts, since email may be used to receive portal verification codes.
Questions About Portal Security
Clients with questions or concerns about portal access or security should contact their firm directly for assistance.
Related to