Your portal account is how you sign in to DMARCER. From the My Account page you can keep your name up to date, change your password, and switch on two-factor authentication (also called MFA) so that even someone who knows your password cannot get in without your phone. Everything on this page applies only to your own login; it does not change anything for other people at your organisation.
What is on the My Account page
The page is split into three simple cards so you can find what you need quickly:
- Your details: your first name and surname, and your email address (shown but not editable).
- Security: change your password, and set up or manage two-factor authentication.
- Account information: a read-only summary showing your email and the date and time you last signed in.
Updating your name
In the Your details card, edit the First name and Surname fields, then click Save changes. This controls how your name appears inside DMARCER. Both fields are required, so you cannot leave them blank.
Your email address cannot be changed here, so it is shown greyed out. Your email is also your username for signing in. If you need to move to a different email address, just ask your service provider (the people who gave you access) to invite the new address for you.
Changing your password
In the Security card, under Password, type your Current password, then your New password, then the same new password again in Confirm new password, and click Change password. Your new password needs to be strong: at least 12 characters, with a mix of upper and lower case letters, numbers and symbols (three or more of those types). It also needs to be different from your current password. If your current password is wrong, the new one is too weak, or the two new entries do not match, you will be asked to try again and your password will not be changed.
Setting up two-factor authentication (MFA)
Two-factor authentication adds a second step when you sign in: as well as your password, you enter a short code from an app on your phone. If MFA is not set up yet you will see a note saying so, with a Set up MFA button. Click it to begin. There are two steps on screen:
- Step 1, Scan with your authenticator app: open an authenticator app on your phone (for example Google Authenticator, Microsoft Authenticator, Authy, 1Password or Bitwarden) and scan the QR code shown. If you cannot scan it, click the copy button next to the key and type or paste the key into your app instead.
- Step 2, Confirm the code: your app will show a 6-digit code that changes every 30 seconds. Type the current code into the 6-digit code box and click Verify and enable MFA.
Once it is switched on, you will be asked for a code from your authenticator app every time you sign in. The Security card will then show a green Active badge.
Your recovery codes
As soon as MFA is switched on, DMARCER gives you 10 single-use recovery codes. These are your backup way to sign in if you ever lose access to your phone or authenticator app. You can Copy all, Download them as a .txt file, or Print them from the recovery codes page.
Important: this is the only time the codes are shown in full. DMARCER stores only a scrambled version of them, so not even support staff can read them back to you later. Please save them somewhere safe, such as a password manager. Each code works once. If you are running low (only a couple left), DMARCER will tell you how many remain when you sign in with one. You can create a fresh set at any time using the Manage recovery codes button, which replaces and cancels your previous codes.
Common pitfalls and tips
- "That code didn't match": the most common cause is the clock on your phone drifting slightly. Make sure your phone's time is set automatically, then enter the next fresh code from your app.
- You have about 15 minutes to finish setting up MFA once the QR code appears. If you leave the page open much longer, start again from Set up MFA so you get a new code.
- If you are asked to scan again because the setup details were missing, simply rescan the new QR code and re-enter a current 6-digit code.
- Do not store your recovery codes in the same place as your phone or password, where someone could find both together.
- If you lose your phone but still have a recovery code, use the recovery code to sign in and then create a fresh set. If you lose both your phone and all of your recovery codes, you will not be able to reset it yourself (a password reset still asks for a code), so you will need to contact your service provider to regain access. This is why keeping at least one recovery code safe is well worth the effort.
- There is no switch to turn MFA off from My Account once it is enabled, and some organisations also require it to stay on. If you have a genuine need to disable it, please contact your service provider.