We show you how to set up Multi-Factor Authentication in GTmetrix.

---

 

Overview

GTmetrix now provides Multi-Factor Authentication (MFA) for enhanced security in account logins.

Setting up MFA for logins is a cybersecurity best practice as MFA can help prevent upto 99.9% of cybersecurity attacks.

MFA is also important for organizations who require additional security needs and compliance across their utilized services.

In this guide, we show you how to set up MFA on your GTmetrix account.

 

---

 

Enabling MFA

Follow the steps below to enable MFA on your Account.

1) Visit your Account page
 

 
You can do this by clicking on the arrow in the top right-hand corner and clicking on “Account“.
 

2) Enable Multi-Factor Authentication

Toggle the Enable Multi-Factor Authentication option ON in the “MFA Configuration” section of your User Settings.
 

 
You should now see a dropdown asking you to select an MFA method. You can either choose Authenticator App or SMS.
 

 
You can use any authenticator app of your choice (e.g., Google Authenticator, Microsoft Authenticator, Authy, etc.) or receive an SMS code on your mobile number (You need to add your mobile number to your profile first).
 

 

---

 

Authenticator App

To enable MFA on your account using an authenticator app of your choice, follow the steps below:

1) Select “Authenticator App” in the MFA Method dropdown

You’ll need to add your GTmetrix account to your Authenticator app.
 

 

You can do this by either scanning the displayed QR Code (easiest option) or using the text code provided (“enter code/key manually” option in your authenticator app).

2) Open your authenticator app and Add Account

Depending on your chosen app, you’ll either see + or “Add Account“.
 

 
Complete the authenticator app setup and you should see a time-based code being displayed for your GTmetrix account.
 

3) Enter the Authenticator code in the provided field and click on “Activate MFA”

You should see the Status change to “Active“.

You’ll also see a Backup Code, which can be used to recover your account if you ever need to disable or re-enable MFA on your account and you don’t have access to your Authenticator App.
 

 
And that’s it! MFA via Authenticator App is now setup on your GTmetrix account.

Every future login will require two steps. First, provide your email and password. GTmetrix will then request an Authentication Code. Enter the code from your Authenticator App to verify your identity and access your account.

 

 

---

 

SMS

Follow the steps below to enable MFA on your account via SMS:

1) Add a Mobile Number to your Account

In your User Settings, input your Mobile Number in the field provided, select the adjacent checkbox, and click on Save Settings.
 

 
You should now be able to select the SMS option in the MFA Method dropdown.
 

2) Select SMS in the MFA Method dropdown

 

 

A validation code will be sent to your Mobile Number.
 

 

3) Enter your SMS code in the provided field and click on Validate

You should see the Status change to “Active“.

You’ll also see a Backup Code, which can be used to recover your account if you ever need to disable or re-enable MFA on your account and you don’t have access to your Authenticator app.
 

 
And that’s it! MFA via SMS is now setup on your GTmetrix account.

Every future login will require two steps. First, provide your email and password. GTmetrix will then send an SMS code to your Mobile Number. Use this code to validate your login and access your account.
 

 

---

 

Changing MFA Method

You can switch your MFA Method from Authenticator App to SMS (or vice versa).

We show you how to do that below.

 

---

 

From Authenticator App to SMS

Follow the steps below to switch your MFA Method from Authenticator App to SMS:

1) Navigate to User Settings on your Account page

Make sure you have inputted your Mobile Number and saved it on your Profile.
 

 
You cannot switch your MFA Method to SMS without first saving your Mobile Number.
 
2) Select SMS on the MFA Method dropdown

 

 
You’ll now be presented with the “Change MFA Method” modal.
 

 
Enter the code from your authenticator app and click on Confirm.

 

3) Enter your SMS Code

 

 

Enter the code sent to your mobile phone and click on Validate.
 

 
You’ll also see a new Backup Code for account recovery.
 

 
Your MFA code will now be sent via SMS when logging in.

 

---

 

From SMS to Authenticator App

Follow the steps below to switch your MFA Method from SMS to Authenticator App:

1) Navigate to User Settings on your Account page
 

2) Select Authenticator App on the MFA Method dropdown

 

 
You’ll now be presented with the “Change MFA Method” modal.
 

 
Enter the code you received via SMS and click on Confirm.
 

3) Set up your authenticator app

You’ll need to add your GTmetrix account to your Authenticator app.

You can do this by either scanning the displayed QR Code (easiest option) or use the text code provided (“enter code/key manually” option in your authenticator app).
 

 
Complete the authenticator app setup and you should see a time-based code being displayed for your GTmetrix account email.

Enter this code in the provided field and click on Activate MFA.
 

 

You’ll see a new Backup Code for account recovery.

You can now use the MFA code from your authenticator app to login to your GTmetrix account.

 

---

 

Disabling MFA

To disable MFA, navigate to the User Settings on your Account page, and toggle the Enable Multi-Factor Authentication button OFF.
 

 
You can also use a Backup Code to do this if you cannot access your authenticator app or your phone for any reason.

 

---

 

Backup Code

A Backup Code is generated for your account when you enable MFA from the Account page.

If you ever lose access to your authenticator app or your phone, you can use the Backup Code for recovery.
 

 
Here are a few situations where you may need to use a Backup Code:

• Account Login: If you’re locked out of your account and don’t have access to your authenticator app (or SMS), you can use your Backup Code to recover.
• Disabling MFA: If you need to disable MFA and don’t have access to your authenticator app (or SMS), you can use your Backup Code to delete MFA credentials.
• Changing MFA Method: If you need to change your MFA Method and don’t have access to your authenticator app (or SMS), you can use your Backup Code to delete MFA credentials.

 

 

Click on Use your Backup Code, then enter your 10 digit Backup Code and click on Restore.
 

 
Your previous MFA credentials will be deleted, and you’ll need to set up a new MFA configuration.
 

 

---

 

Summary

GTmetrix now supports Multi-Factor Authentication (MFA) to improve account security and reduce the risk of unauthorized access.

Users can enable MFA via an authenticator app (e.g., Google Authenticator, Microsoft Authenticator, Authy, etc.) or SMS.

Setup involves:

• Adding your account on the authenticator app (or saving your mobile number to your GTmetrix profile)
• Verifying a code (Authenticator or SMS)
• Saving a Backup Code for recovery

You can switch MFA methods (or disable MFA) anytime from your account settings, but completing the setup is essential to keep your account protected.

If you have any questions or need assistance with your account, please feel free to contact us.

 

---