Setting up MFA

This guide will walk you through the process of enabling MFA on your FullContact account to better protect your account and data.

Once you complete this step, MFA will be required in order to login using your username/password to both the FullContact Platform web application and cftp.fullcontact.com (using the SFTP protocol on port 22 - see below for instructions).

1. Login to Platform

Login to https://platform.fullcontact.com as you normally would (using username/password or Google SSO authentication).

2. Navigate to account preferences page

Once logged in click on "My Account" -> "Account" in the bottom left menu bar:

3. Click "Edit" in the MFA row

Once on the "Account - Settings" page click "Edit" on the row titled "MFA".

4. Enter your current password

After clicking on "Edit" in the previous step, a pop up will appear prompting you for your password.

Enter your current password into the box and click "Enable MFA". If you do not know your current password visit the Forgot Password page.

5. Use a virtual authenticator app to scan the code

Use an app like Google Authenticator, Authy, or 1Password to scan the code shown on the screen. Make sure to scan the code or copy and store the text code in a secure place as it will not be shown again.

6. Click Done and Confirm

After clicking the Done button, the text will turn to "Confirm" and you will be shown a warning message. This is just a reminder that this code will not be shown again and to double check it has correctly been added to your authenticator app.

Logging into Platform with MFA

When you have MFA enabled on your account you will be prompted for the code when you login with username/password. If you use the "Sign in with Google" option you will not be prompted for your password or MFA code.

1. Login to Platform using username and password

Visit https://platform.fullcontact.com/login and enter your username and password and click on the "Log in" button.

2. Enter your MFA code and click "Verify" when prompted

After clicking "Log in" you will be prompted to enter you MFA code that is currently displayed in your authentication app. Enter the code and click "Verify".

Logging into cftp.fullcontact.com using MFA

Our secure SFTP server (cftp.fullcontact.com) uses the same username/password as the Platform web app to authenticate you. When you enable MFA on your Platform account you will also be required to provide the MFA code when logging to cftp.fullcontact.com.

Since the SFTP protocol does not support a prompt for an MFA code you will need to provide it as part of your username/email.

1. Log in to CFTP using the SFTP command line or graphical tool

For example, if your email/username is: [email protected] and your authenticator app was currently showing the code 646325 you would login to CFTP using the following sequence of commands:

sftp [email protected]@cftp.fullcontact.com
FullContact SFTP
Log in with email address and FullContact password
[email protected]@cftp.fullcontact.com's password:
Connected to cftp.fullcontact.com.
sftp>

Following this sequence of commands - In the first line you'll notice we've appended otp646325 (otp = one time password) to the user's credentials to use the MFA code.

Finally - When prompted for your password, enter the same password you use for the Platform web app. The sftp> prompt on the last line above indicates the login was successful.

Logging into cftp.fullcontact.com using public/private key authentication

Using public private keys is the most secure way to authenticate to SFTP and avoids the need for using MFA.

This feature is coming soon and we will add documentation here when it is ready.