As part of our ongoing commitment to data protection and system security, we are introducing Multi-Factor Authentication across our platforms. This additional layer of security helps safeguard your account and your clients’ data.
What is Multi-Factor Authentication (MFA)?
Multi-Factor Authentication is a security process that requires users to verify their identity using two or more methods before accessing an application or account.
Instead of relying solely on a password, MFA combines:
Something you know (your password)
Something you have (a secure authentication app)
This significantly reduces the risk of unauthorised access, even if your password has been compromised.
Why are we implementing MFA?
Enhanced security
MFA makes it far more difficult for attackers to access your account using stolen credentials.Protection against phishing
Even if someone gains your password through phishing, they still cannot access your account without the second authentication factor.
Regulatory and customer data protection
We have a responsibility to protect sensitive client data. MFA supports compliance with regulatory expectations and strengthens our data security framework.
How are we implementing Multi-Factor Authentication and what does it mean for you?
We are using Auth0, a trusted authentication provider, to implement MFA securely across our systems.
Before logging in for the first time with MFA enabled, you will need to set up a second verification method. You can choose either:
Option A – Authentication App
Install one of the following authenticator apps on your smartphone or tablet.
Authenticator App | Download Links |
Auth0 Guardian | (Google Play / App Store) |
Authy | (Google Play / App Store) |
Google Authenticator | (Google Play / App Store) |
Microsoft Authenticator | (Google Play / App Store) |
We recommend using either Microsoft Authenticator or Google Authenticator, as you may already be familiar with them and they offer a simple, reliable user experience.
Option B – Hardware Security Key
If you prefer not to use a mobile device, you can use a physical security key. These connect via USB and offer a highly secure alternative to authentication apps.
Setting up MFA with an Authenticator App
Once you have installed your chosen authenticator app, follow the steps below:
Step 1: Log in as normal
Log into the Mortgage Brain Hub as usual using your registered email address and password.
Step 2: Select Authenticator app
You will be prompted to set up MFA. Open your authenticator app.
Step 3: Scan QR code & enter OTP
Scan the QR code displayed on screen. Your app will then display a One-Time Passcode (OTP). Enter this code into the field shown to verify your device.
Step 4: You're all set!
Once verified, you’ll be redirected to the Mortgage Brain Hub homepage and can continue using the system as normal.
Future logins – what to expect
Auth0 uses intelligent risk-based security. When you log in again, you may be asked to verify your identity if:
You’re logging in from a new device or browser
There’s unusual activity on your account
Your risk score triggers a security check
When prompted, you can generate a new OTP from your authenticator app
Setting up MFA with a Security Key
Follow the steps below if you are using a physical security key instead of an authenticator app.
Step 1: Log in as normal
Enter your username and password on the Mortgage Brain Hub login screen.
Step 2: Select Security Key
When prompted to set up MFA, choose the Security Key option.
Step 3: Insert your Security Key
Insert your security key into your computer’s USB port, then click Use security key.
Step 4: Confirm security key type
If prompted, select Security key and click Next to continue.
Step 5: Accept browser warning (if shown)
You may see a browser security message - this is expected. Click OK to continue.
Step 6: Create a PIN
Enter a numerical PIN for your security key (minimum 4 digits), then click OK.
This PIN protects your key if it’s lost or stolen.
Step 7: Touch your security key
Depending on your model, you may need to tap or press the button on your security key to confirm the setup.
Step 8: Save your security key
Your passkey is now linked to your account.
Step 9: Name your security key
Enter a friendly name (e.g. "Work Key" or "Laptop Key"). This is useful if you plan to register more than one key. Otherwise, you can leave the default name.
Step 10: Complete setup
Click Continue to finish. Your security key is now ready to use for future logins.
