Enable Multi-factor Authentication (MFA) to keep your Ubiquiti account safe. We currently offers App authentication, email authentication and recovery codes as a backup. Please note that we cannot reset MFA for you, so make sure to have backup methods in place.
- How to Enable App Authentication
- How to Create Backup Codes
- How to Disable MFA
- How to Access a Locked Out Account
How to Enable App Authentication
1. Download and install Google Authenticator to your mobile phone. Authy will also work, but steps might be slightly different as those described below.
2. Log into account.ui.com and select My Security. In this section you can change your account password and session timeout period as well as enable Multi-factor Authentication (MFA).
3. Unlock your Security settings, and then enable MFA, selecting App authentication as your MFA method.
4. Open the Google Authenticator app on your phone, tap menu, then tap Begin Setup > Scan barcode. If you already have other accounts, you would click the plus sign (+) and Scan barcode.
5. Use your mobile to scan the QR code that appeared in the account.ui.com screen.
6. A 6-digit authentication token will appear in your token list in the authenticator app. Copy it and click Continue in the account.ui.com pop up.
7. Enter the 6-digit authentication token.
Note: Email authentication will be enabled automatically as a backup method to prevent permanent account lockout if you are unable to access your authenticator app.
How to Create Backup Codes
Create recovery codes to access your account in case you lose access to your authenticator app and email.
1. Access your account security settings by logging into account.ui.com and going to My Security and unlocking your Security settings.
2. Click the recovery codes link under the list of MFA methods.
3. Save these codes somewhere safe.
Note: Generating new recovery codes makes any previously generated ones obsolete. Each code can be used only once.
How to Disable MFA
1. Access your account security settings by logging into account.ui.com and going to My Security.
2. Unlock your Security settings and then click Disable in the MFA section.
How to Access a Locked Out Account
If you lost access to your authenticator app, use one of the backup methods to access your account.
1. Go to account.ui.com, enter your username and password as usual, and when prompted for the 6 Digit Token, click Other Methods instead.
2. Select which secondary method you will be using to authenticate and retrieve the 6-digit code via email or use one of the recovery codes you saved in the past.
To preserve your account's security, we cannot reset your multi-factor authentication. If you have lost access to all authentication methods, you will need to create a new account.
Using App Authenticator Tokens in Legacy Services
Some older Ubiquiti services do not support MFA, but may still require log-in credentials to include a token if you have enabled App authentication on your UI.com account. In this instance, you must add a vertical bar ( | ) to the end of your password followed by your App authenticator token, as shown in the example below:
Example Password with Token (non-space-separated) : 2931utkyu|987099
To circumvent this step and enjoy the latest account and device security features, we recommend updating all equipment to the newest version