Help Center

Multi-Factor Authentication (MFA) for the Klearcom Client Portal

Written by Klearcom | Jan 12, 2026 2:21:30 PM

Why enable MFA?

Passwords alone can be guessed, shared, or stored in browsers. MFA adds a second check so only the right people get into your Klearcom account. Enabling it reduces unauthorized access, protects operational data, and supports internal security standards.

How MFA works in Klearcom

Prompted setup on next login. When an admin switches MFA on for a user, that user is asked to choose five security questions (from a list of ten) and provide answers the next time they sign in. At each future login, the platform asks one question at random; if the user doesn’t recognize it, they can cycle through the five selected questions until they reach one they remember. 

Who can enable MFA. Only users with administrative permissions can enforce MFA for your organization. The default master user (Admin) is automatically an administrator unless roles were customized.

Inline CTA: Want us to enable MFA for your team? Contact Klearcom Support and we’ll walk you through it.

What administrators can do

Admins can:

  • Enable MFA for any user.

  • Disable MFA if a user is locked out or forgets answers.

  • Reset MFA so a user can start fresh if needed.
    Users can’t toggle MFA for themselves.

Enabling MFA in the Client Portal (step-by-step)

Navigation path: Configuration → Users → Users Tab → Action Column
Steps:

  1. Find the user in the list.

  2. Click the shield icon to enable MFA.

  3. Confirm in the pop-up.
    The shield icon changes format after enabling, and you can later disable or reset as needed. 

Failed-attempt protection and lockouts

To keep accounts safe, the portal applies automatic safeguards:

  • After 3 incorrect MFA answers → a CAPTCHA challenge appears.

  • After 5 incorrect answers → the account locks for 1 hour.

  • The user gets an automatic lockout email.
    If a user forgets all answers, an admin can reset MFA, and the user will be guided through setup again at next login.

Best practices we recommend

  • Turn on MFA for all admins first. Start with the master Admin account, then roll out to the rest of your team. 

  • Coach users on question quality. Pick memorable, private answers that don’t change (avoid anything that can be scraped from social media).

  • Stage the rollout. Enable per department or region, then verify access before expanding.

  • Document a recovery path. Decide who in IT can reset MFA and how users should reach them.

  • Monitor and review. Periodically audit which accounts have MFA enabled and confirm that recovery contacts are current.

FAQs

Can users enable or disable MFA for themselves?
No. Only admins can manage MFA states for users.

What happens if someone answers the security question incorrectly a few times?
After 3 wrong answers, they’ll see a CAPTCHA. After 5, the account locks for 1 hour and the user is emailed automatically.

How do I know who has MFA enabled?
In Configuration → Users, the shield icon in the Action column shows MFA status.

Who can turn MFA on for our company?
Any user with administrative permissions; the default master Admin is an admin by default.

Troubleshooting

  • User can’t remember any answers. Admin should reset MFA for that user; they’ll set new questions on next login. 

  • User is locked out. Wait one hour for automatic unlock, or an admin can disable MFA temporarily and re-enable after access is restored. 

  • The shield icon doesn’t appear. Confirm you’re in the right navigation path and that your account has admin permissions

Need help?

If you’d like Klearcom Support to enable, reset, or manage MFA on your behalf—or to review your security configuration—reach out and we’ll assist.

End CTA: Secure your Klearcom access with MFA today. Contact Support to get started.