Multi-factor Authentication

Enable MFA with a hardware token and authenticator app (no mobile phone required)

To set up MFA without using a mobile phone, follow the steps in the previous section to enable MFA through a mobile authenticator and leverage an authenticator app that pairs with a hardware token. For example, you can leverage hardware such as a YubiKey and the Yubico Authenticator app. For details on how to set up a Yubikey to work with Yubico Authenticator, see Using Your YubiKey with Authenticator Codes.

Change your MFA device or method

You can reset MFA to change the device where you receive confirmation codes or to change whether you receive the confirmation codes through a mobile authenticator app or SMS text messages.

On your profile, select the edit button for Multi-factor authentication and then select Manage, Change setup.
Select Change setup to reset your MFA settings.
On the Blackbaud ID setup screen to enable MFA, set up MFA again by selecting whether to receive confirmation codes through a mobile authenticator app or text messages and then setting up and confirming the device that will receive confirmation codes.

Exempt a device from MFA

To not require the confirmation code on a personal device you frequently use, select Remember this browser when you sign in with a code on that device. When you select this, your Blackbaud ID:

Recognizes the same device and browser for 30 days and won't ask for a confirmation code during that time.
Requires a confirmation code to confirm your identity on other devices and browsers, or in incognito or private sessions on the same device and browser.

Tip: For security, don't select Remember this browser on a public device used by others.

Request a new recovery code

When you enable MFA, you get a 24-digit recovery code to use in case you lose your mobile device or can't receive text messages. If you lose this recovery code, you can request a new one.

On your profile, select the edit button for Multi-factor authentication and then select Manage, New recovery code.
To reset your recovery code, select Reset.
Save the recovery code in a secure location, and select Close.

Set up a recovery phone number

Your recovery phone number backs up your MFA recovery code and ensures that you are never locked out of your Blackbaud account. This option is only available if you authenticate through a mobile authenticator app.

You get your 24-digit recovery code when you set up MFA to access your Blackbaud account even if you can't receive MFA confirmation codes. But if you lose your recovery code, you can still be locked out of your account. By setting up a recovery phone number, you enable a backup method to confirm your identity so that you can access your account and re-configure MFA even if you don't have your recovery code.

If you authenticate through a mobile authenticator app, you are prompted to add a recovery phone number after you sign in. Enter the mobile phone number to use as a backup if you lose your recovery code and need to reset MFA. The recovery phone number then appears on your profile under Multi-factor authentication.

To edit your recovery phone number:

On your profile, select the edit button for Multi-factor authentication.
Under Recovery phone number, select Edit.
On the page that appears, enter a mobile phone number that you can use as a backup if you lose your recovery code and select Continue.

Reset MFA with your recovery code or recovery phone number

If you can't receive MFA confirmation codes for any reason, such as when you change or lose the mobile device that receives the 6-digit codes, you can use your recovery code to access your Blackbaud account. If you don't have your recovery code and authenticate through a mobile authenticator app, you can use your recovery phone number to reset MFA instead.

To access your Blackbaud account with your recovery code:

On the Blackbaud ID sign-in page, enter your email address and password, and select Sign in.
On the page that prompts you for your 6-digit MFA confirmation code, select Need help?.
To access the recovery code page, select I don't have access to my multi-factor authentication device.
Enter your 24-digit recovery code and select Continue.
Save the new recovery code, and select I saved my recovery code to confirm that you saved it. This new code replaces the one you just used.
Select Sign in. Your Blackbaud account appears, and you can go to your profile to update MFA settings as necessary.

To reset MFA with your recovery phone number:

Tip: This option is only available if you authenticate through a mobile authenticator app.

On the Blackbaud ID sign-in page, enter your email address and password, and select Sign in.
On the page that prompts you for your 6-digit MFA confirmation code, select Need help?.
Select Don't have your recovery code? A page to confirm your identity appears..
On the first tab, enter the 6-digit code that was sent to your Blackbaud ID email address, and select Next.
On the second tab, enter the 6-digit code that was texted to your recovery phone number, and select Next.
On the third tab, select Set up MFA to reset MFA. Your Blackbaud account appears, and you can go to your profile to create a new recovery code and update your MFA settings as necessary.

Disable MFA

You can disable multi-factor authentication to change settings or when you can't receive text messages.

If MFA is enabled but you don't have the option to disable it, then MFA is enforced for your account through single sign-on, and you can't disable it.

On your profile, select the edit button for Multi-factor authentication and then select Manage, Disable.
To confirm the action, select Disable
Enter the confirmation code that you receive at your email address and then select Disable.

Issues with MFA?

If you opt to increase security by enabling multi-factor authentication or use a solution where Blackbaud enforces MFA, you can review the MFA Frequently Asked Questions to find solutions for common issues.