Multi-Factor Authentication (MFA)

How To

Click to edit heading

On March 15th, all previously trusted devices will be cleared, and any device currently marked as “trusted” will need to be re-trusted the next time you log in.

Multi-Factor Authentication (MFA) is the process requiring a user to verify their identity in two unique ways before they are granted access to a system.

Traditionally, users are familiar to verification systems that require them to provide a unique identifier such as an email address and a password to gain access to the system. MFA extends this model by adding an additional step to the verification process, in our case requiring the user to enter a one-time verification code that is generated via a mobile device that only the user has access to.

You can generate MFA verification codes using the LEAP Authenticator in the LEAP Mobile app.

Alternatively, you can also use a Third Party Authenticator app of your choice, such as Microsoft Authenticator or Google Authenticator.

Overview

Why do I need MFA?

MFA gives the user and administrator a peace of mind as it ensures that even if their password is compromised, the account cannot be accessed without entering a verification code.

How does it work?

When signing into LEAP, you'll first need to enter your LEAP credentials. If the credentials are valid, you'll then be prompted to enter a verification code which is generated via your mobile device.

Do I need to enter a code every time I log into LEAP?

No, if you've trusted a device or browser, you won’t need to enter a code until the device or browser is un-trusted.

Before You Implement MFA

Should you introduce MFA at your firm?

Whilst MFA does provide a higher level of security, you should consider if MFA is appropriate for your firm.

Educate your staff about MFA

Make sure everyone understands why you are implementing MFA. We recommend that you share this article with your staff.

Do all staff have a supported device with LEAP Mobile installed?

To implement MFA, all staff will need the LEAP Mobile app or a Third Party Authenticator app installed on their iPhone, iPad or Android device.

Have a plan for lost devices

Ensure that you know who has administrator privileges in LEAP as only LEAP Admin users can temporarily pause MFA to help you regain access to your account if your device is lost or unavailable.

Setting Your MFA Firm Requirement

Click to edit heading

Only a LEAP Admin user is able to set a requirement for all users to activate MFA on their mobile device.

Click to edit heading

Desktop: Click the LEAP Menu > Settings > Application Settings.

The LEAP Application Settings will open in a new window.

Web: Click > Settings > Application Settings.

The LEAP Application Settings will open in a new window.

Click Firm > under Staff > Staff Members.

The Staff Members List will be displayed.
From the top-right corner, enable or disable Require Multi-Factor Authentication for all staff.

If Require Multi-Factor Authentication is enabled, you will receive a confirmation message stating that MFA has been enabled for all staff once the process has been completed.

Once MFA is enabled, the next time your firm's staff signs into LEAP, they will be prompted to activate MFA on their mobile device.

Pausing Multi-Factor Authentication for 24 Hours

You can temporarily pause Multi-Factor Authentication for 24 hours.

Click to edit heading

You can temporarily disable Multi-Factor Authentication for your own account. However, only a LEAP Admin user can temporarily disable Multi-Factor Authentication for other staff members.

Click to edit heading

If you’re experiencing issues logging in with MFA, please contact your LEAP Admin user and ask them to temporarily pause MFA for your account using the steps below.

If you are a single user firm and unable to log in with MFA, please contact LEAP Support for assistance.

Click to edit heading

Desktop: Click the LEAP Menu > Settings > Application Settings.

The LEAP Application Settings will open in a new window.

Web: Click > Settings > Application Settings.

The LEAP Application Settings will open in a new window.

Click Firm > under Staff > Staff Members.

The Staff Members List will be displayed.
Select the staff member.
Click Multi-factor authentication on the left.
Click to toggle the Require MFA option off.
Click Continue.
Enter your LEAP password.

Multi-factor Authentication will be paused for 24 hours, and the time it will automatically resume will be shown.

Click to edit heading

To unpause MFA, toggle Require MFA back on and enter your LEAP password to confirm the change.

See the tabs below for the Authenticator method you wish to use:

LEAP Authenticator
Third Party Authenticator

Activating Your Device

Click to edit heading

Please ensure your LEAP Mobile app is updated to the latest version. Only one mobile device per LEAP user can be activated to receive verification codes.

MFA Firm Requirement Mandatory

If your firm has made MFA mandatory for you, the next time you sign into LEAP, you will be prompted to set up MFA.

Desktop

Click to edit heading

Once you log into LEAP Desktop, you will be redirected to the LEAP Mobile app to continue the set up of MFA.

Click to edit heading

If you are currently logged into the LEAP Mobile app, please ensure you log out first before starting the MFA activation process.

Open or download the LEAP Mobile app.
From the LEAP Mobile app home screen, tap Authenticator to switch modes.
Log in with your username and password.
You will be prompted to set your current device as the Authenticator device.

Tap Activate to continue.

A notification will appear confirming that your device has been successfully activated as your LEAP Authenticator.

A 6-digit verification code will then be displayed, which you can use to log in to LEAP.

Web

Click to edit heading

Once you log in via LEAP Web, you will be prompted to set up an Authenticator device.

Click Continue with LEAP Authenticator.

Instructions on how to set up multi-factor authentication with the LEAP Authenticator will be displayed.
Open or download the LEAP Mobile app.

Click to edit heading

If you are currently logged into the LEAP Mobile app, please ensure you log out first before starting the MFA activation process.

From the LEAP Mobile app home screen, tap Authenticator to switch modes.
Log in with your username and password.
You will be prompted to set your current device as the Authenticator device.

Click Activate to continue.

A notification will appear confirming that your device has been successfully activated as your LEAP Authenticator.

A 6-digit verification code will then be displayed, which you can use to log in to LEAP.

Mobile (iOS & Android)

Open or download the LEAP Mobile app.

Click to edit heading

If you are currently logged into the LEAP Mobile app, please ensure you log out first before starting the MFA activation process.

From the LEAP Mobile app home screen, tap Authenticator to switch modes.
Log in with your username and password.
You will be prompted to set your current device as the Authenticator device.

Tap Activate to continue.

A notification will appear confirming that your device has been successfully activated as your LEAP Authenticator.

A 6-digit verification code will then be displayed, which you can use to log in to LEAP.

Optional Activation

You can activate your mobile device to receive verification codes, even if your firm has not made MFA mandatory for you.

Mobile (iOS & Android)

Click to edit heading

If you are currently logged into the LEAP Mobile app, please ensure you log out first before starting the MFA activation process.

Open the LEAP Mobile app from your mobile device.
Tap Authenticator to switch modes.
Enter your LEAP username and password.
Tap Set-Up Multi-Factor Authentication.
Toggle Use As Authenticator on.

Click to edit heading

Alternatively, if you are already logged into the LEAP Mobile app:

iPhone: Tap > under Profile & Security > Multi-Factor Authentication > Enable Use As Authenticator.
iPad: Tap > under Profile & Security > Multi-Factor Authentication > Enable Use As Authenticator.
Android: Tap Settings > Multi-Factor Authentication > Enable Use As Authenticator.

Application Settings

Click to edit heading

Desktop: Click the LEAP Menu > Settings > Application Settings.

The LEAP Application Settings will open in a new window.

Web: Click > Settings > Application Settings.

The LEAP Application Settings will open in a new window.

Click Firm > under Staff > Staff Members.

The Staff Members List will be displayed.
Click your name to open your staff profile from the Staff Members List.
Click Multi-factor authentication on the left.
Under Multi-Factor Authenticator Apps, click Enroll next to LEAP Authenticator.
Enter your LEAP password.
Instructions on how to set up multi-factor authentication with the LEAP Authenticator will be displayed.
Open or download the LEAP Mobile app.

Click to edit heading

If you are currently logged into the LEAP Mobile app, please ensure you log out first before starting the MFA activation process.

From the LEAP Mobile app home screen, tap Authenticator to switch modes.
Log in with your username and password.
You will be prompted to set your current device as the Authenticator device.

Tap Activate to continue.

A notification will appear confirming that your device has been successfully activated as your LEAP Authenticator.
Click Continue back in the Staff Members page.
Enter the MFA code from your LEAP Authenticator and update the Name if required.
Click Next.

After you enter a valid MFA code, you will receive a message that multi-factor authentication with your LEAP Authenticator has been successfully enabled.

Signing into LEAP

Desktop

Log into LEAP Desktop with your username and password.
You will be prompted to enter a MFA verification code.
Open the LEAP Mobile app.
From the LEAP Mobile app home screen, tap Authenticator to switch modes.
Enter your username and password.
Enter the verification code displayed on the LEAP Authenticator.

The verification code will expire in 30 seconds. If you cannot enter the code by then, a new code will be automatically generated for you.
(Optional) Select Trust this device if you would like to bypass MFA on the device you’re currently using.

Click to edit heading

Do not choose this option if you’re using a shared computer.

Click Verify.

Web

Log into LEAP Web with your username and password.
You will be prompted to enter a MFA verification code.
Open the LEAP Mobile app.
From the LEAP Mobile app home screen, tap Authenticator to switch modes.
Enter your username and password.
Enter the verification code displayed on the LEAP Authenticator.

The verification code will expire in 30 seconds. If you cannot enter the code by then, a new code will be automatically generated for you.
(Optional) Tick Trust this computer (for 30 days) if you would like to bypass MFA on the device you’re currently using. You can also update the Computer Name if needed.

Click to edit heading

Do not choose this option if you’re using a shared computer.

Click Authenticate.

Trusted Devices

Trusting Devices & Browsers

Trusting devices can only be done after entering your username and password and during the MFA code challenge screen.

LEAP Desktop

Tick Trust this device before you click on Verify. Your desktop device is now trusted and will remain so until the device is un-trusted.

LEAP Web

Tick the option Trust this computer and update the Computer Name for easier identification, if necessary. The browser will be trusted for 30 days or until the browser history is cleared.

Click to edit heading

Devices can only be trusted for a maximum of 30 days.
Devices cannot be trusted via the Application Settings window.

Removing Trusted Devices

To remove a trusted device:

Click to edit heading

Please note that you can only remove trusted devices from your own account.

Click to edit heading

Desktop: Click the LEAP Menu > Settings > Application Settings.

The LEAP Application Settings will open in a new window.

Web: Click > Settings > Application Settings.

The LEAP Application Settings will open in a new window.

Click Firm > under Staff > Staff Members.

The Staff Members List will be displayed.
Click your name to open your staff profile from the Staff Members List.
Click Multi-factor authentication on the left.
Under Trusted Devices, click the bin icon next to the device you would like to remove.
Click Delete to continue.

A notification will be displayed to confirm that the trusted device has been removed.

Managing Authenticator Devices & Apps

Replacing Your Authenticator

Click to edit heading

Desktop: Click the LEAP Menu > Settings > Application Settings.

The LEAP Application Settings will open in a new window.

Web: Click > Settings > Application Settings.

The LEAP Application Settings will open in a new window.

Click Firm > under Staff > Staff Members.

The Staff Members List will be displayed.
Click your name to open your staff profile from the Staff Members List.
Click Multi-factor authentication on the left.
Under Multi-Factor Authenticator Apps, click the 3 dots icon next to LEAP Authenticator and click Replace authenticator.
Replacing the authenticator will remove the current authenticator device and all trusted devices.

Click Continue to confirm.
Enter your LEAP password.
Instructions to replace your LEAP Authenticator will be displayed on the screen.

Open or download the LEAP Mobile app on your new device.

Click to edit heading

If you are currently logged into the LEAP Mobile app, please ensure you log out first before starting the MFA activation process.

Tap Authenticator to switch modes.
Log in with your username and password.
You will be prompted to set your current device as the Authenticator device.

Click Activate to continue.
Click Continue back in the Staff Members page.
Enter the MFA code from the LEAP Authenticator and update the Name if required.
Click Next.

A notification will appear confirming that your new device has been successfully activated as your LEAP Authenticator.

Removing Your Authenticator

Click to edit heading

We highly recommend deactivating the LEAP Authenticator on your mobile device before uninstalling/removing the LEAP Mobile app.

If you did not deactivate the LEAP Authenticator prior to uninstalling/removing the LEAP Mobile app, you can still deactivate it from the LEAP Application Settings.

There may be times when you need to deactivate the LEAP Authenticator on your device, such as when:

You purchase a new mobile device; or
You no longer have access to your mobile device.

If you purchase a new mobile device, you will need to remove the LEAP Authenticator from your old paired device and then activate the LEAP Authenticator on your new mobile device to receive verification codes.

If you no longer have access to your mobile device, you will need to remove the LEAP Authenticator via the Application Settings page and then activate the LEAP Authenticator on your new device.

From Your Paired Device

Click to edit heading

If your LEAP Firm Admin has restricted your access to LEAP Mobile, you will need to log into the Authenticator side of the LEAP Mobile App.

Please see our article, LEAP Mobile Authenticator for more information.

Open the LEAP Mobile app from your paired mobile device.
- iPhone: Tap > under Profile & Security > Multi-Factor Authentication > Disable Use As Authenticator.
- iPad: Tap > under Profile & Security > Multi-Factor Authentication > Disable Use As Authenticator.
- Android: Tap Settings > Multi-Factor Authentication > Disable Use As Authenticator.

From LEAP Application Settings

Click to edit heading

Desktop: Click the LEAP Menu > Settings > Application Settings.

The LEAP Application Settings will open in a new window.

Web: Click > Settings > Application Settings.

The LEAP Application Settings will open in a new window.

Click Firm > under Staff > Staff Members.

The Staff Members List will be displayed.
Click your name to open your staff profile from the Staff Members List.
Click Multi-factor authentication on the left.
Under Multi-Factor Authenticator Apps, click the 3 dots icon next to LEAP Authenticator and select Remove authenticator.
Removing the authenticator will remove the current authenticator device and all trusted devices.

Click Continue to confirm.
Enter your LEAP password.

A notification will be displayed to confirm that the LEAP Authenticator has been removed.

Activating Your Device

MFA Firm Requirement Mandatory

If your firm has made MFA mandatory for you, the next time you sign into LEAP, you will be prompted to set up MFA.

Web

Click to edit heading

Once you log in via LEAP Web, you will be prompted to set up an Authenticator device.

If your firm has made MFA mandatory for you, the next time you sign into LEAP Web, you will be prompted to set up MFA.
Click Continue with Other Authenticator.

Instructions on how to set up multi-factor authentication with an authenticator app of your choice will be displayed.
Download an Authenticator app of your choice. For example, Microsoft Authenticator or Google Authenticator.
Scan the QR code using your authenticator app, or manually enter the key shown in the instructions on LEAP Web.
Once added, you will see a 6-digit code which you can now use to log into LEAP Web.
Click Next.
Enter the MFA code from your third party authenticator and update the Name if required.
Click Next.

After you enter a valid MFA code, you will receive a message that multi-factor authentication with your third party authenticator has been successfully enabled.

Application Settings

It is possible to enable a Third Party Authenticator via the Staff Members page in the LEAP Application Settings.

Click to edit heading

Desktop: Click the LEAP Menu > Settings > Application Settings.

The LEAP Application Settings will open in a new window.

Web: Click > Settings > Application Settings.

The LEAP Application Settings will open in a new window.

Click Firm > under Staff > Staff Members.

The Staff Members List will be displayed.
Click your name to open your staff profile from the Staff Members List.
Click Multi-factor authentication on the left.
Under Multi-Factor Authenticator Apps, click Enroll next to Other Authenticator.
Enter your LEAP password.
Instructions on how to set up multi-factor authentication with an authenticator app of your choice will be displayed.
Download an Authenticator app of your choice. For example, Microsoft Authenticator or Google Authenticator.
Scan the QR code using your authenticator app, or manually enter the key shown.
Once added, you will see a 6-digit code which you can now use to log in.
Click Next.
Enter the MFA code from your third party authenticator and update the Name if required.
Click Next.

After you enter a valid MFA code, you will receive a message that multi-factor authentication with your third party authenticator has been successfully enabled.

Optional Activation

You can activate a Third Party Authenticator app, even if your firm has not made MFA mandatory for you via the LEAP Application Settings.

Click to edit heading

Desktop: Click the LEAP Menu > Settings > Application Settings.

The LEAP Application Settings will open in a new window.

Web: Click > Settings > Application Settings.

The LEAP Application Settings will open in a new window.

Click Firm > under Staff > Staff Members.

The Staff Members List will be displayed.
Click your name to open your staff profile from the Staff Members List.
Click Multi-factor authentication on the left.
Under Multi-Factor Authenticator Apps, click Enroll next to Other Authenticator.
Enter your LEAP password.
Instructions on how to set up multi-factor authentication with an authenticator app of your choice will be displayed.
Download an Authenticator app of your choice. For example, Microsoft Authenticator or Google Authenticator.
Scan the QR code using your authenticator app, or manually enter the key shown.
Once added, you will see a 6-digit MFA code.
Click Next back in the Staff Members page.
Enter the MFA code from your third party authenticator and update the Name if required.
Click Next.

After you enter a valid MFA code, you will receive a message that multi-factor authentication with your third party authenticator has been successfully enabled.

Signing into LEAP

Desktop

Log into LEAP Desktop with your username and password.
You will be prompted to enter a verification code.
Open your third party authenticator app to generate a code.
Enter the verification code displayed on your authenticator app into LEAP.
(Optional) Select Trust this device if you would like to bypass MFA on your current device for 30 days.

Click to edit heading

Do not choose this option if you’re using a shared computer.

Click Verify.

Web

Log into LEAP Web with your username and password.
You will be prompted to enter a verification code.
Open your third party authenticator app to generate a code.
Enter the verification code displayed on your authenticator app into LEAP Web.
(Optional) Tick Trust this computer (for 30 days) if you would like to bypass MFA on your current device for 30 days. You can also update the Computer Name if needed.

Click to edit heading

Do not choose this option if you’re using a shared computer.

Click Authenticate.

Trusted Devices

Trusting Devices & Browsers

Trusting devices can only be done after entering your username and password and during the MFA code challenge screen.

LEAP Desktop

Tick Trust this device before you click on Verify. Your desktop device is now trusted and will remain so until the device is un-trusted.

LEAP Web

Tick the option Trust this computer and update the Computer Name for easier identification, if necessary. The browser will be trusted for 30 days or until the browser history is cleared.

Click to edit heading

Devices can only be trusted for a maximum of 30 days.
Devices cannot be trusted via the Application Settings window.

Removing Trusted Devices

To remove a trusted device:

Click to edit heading

Please note that you can only remove trusted devices from your own account.

Click to edit heading

Desktop: Click the LEAP Menu > Settings > Application Settings.

The LEAP Application Settings will open in a new window.

Web: Click > Settings > Application Settings.

The LEAP Application Settings will open in a new window.

Click Firm > under Staff > Staff Members.

The Staff Members List will be displayed.
Click your name to open your staff profile from the Staff Members List.
Click Multi-factor authentication on the left.
Under Trusted Devices, click the bin icon next to the device you would like to remove.
Click Delete to continue.

A notification will be displayed to confirm that the trusted device has been removed.

Managing Authenticator Devices & Apps

Replacing Your Authenticator

You can replace your Third Party authenticator app if you wish to switch to a different one. For example, changing from Microsoft Authenticator to Google Authenticator.

Click to edit heading

Desktop: Click the LEAP Menu > Settings > Application Settings.

The LEAP Application Settings will open in a new window.

Web: Click > Settings > Application Settings.

The LEAP Application Settings will open in a new window.

Click Firm > under Staff > Staff Members.

The Staff Members List will be displayed.
Click your name to open your staff profile from the Staff Members List.
Click Multi-factor authentication on the left.
Under Multi-Factor Authenticator Apps, click the 3 dots icon next to Other Authenticator and click Replace authenticator.
Replacing the authenticator will remove the current authenticator and all trusted devices.

Click Continue to confirm.
Enter your LEAP password.
Instructions to replace your authenticator app will be displayed on the screen.

You can now download another Third Party Authenticator app and scan the QR code or manually enter the key to activate it.
Click Continue.
Enter a verification code from the new authenticator app to complete the pairing.

You can also update the Name of the authenticator.
Click Confirm.

Removing Your Authenticator

Click to edit heading

Please note that removing your account from your Third Party Authenticator app will not remove the Authenticator app enrolled in the LEAP Application Settings.

If you no longer have access to your mobile device, you may need to remove the currently enrolled Third Party Authenticator from the LEAP Application Settings before setting it up on a new device.

Some authenticator apps allow accounts and verification codes to sync to your account. If this feature is enabled, you may be able to install the authenticator app on another device and sign in to restore your verification codes.

If you cannot access your synced authenticator account, follow the steps below to remove the authenticator from the LEAP Application Settings:

Click to edit heading

Desktop: Click the LEAP Menu > Settings > Application Settings.

The LEAP Application Settings will open in a new window.

Web: Click > Settings > Application Settings.

The LEAP Application Settings will open in a new window.

Click Firm > under Staff > Staff Members.

The Staff Members List will be displayed.
Click your name to open your staff profile from the Staff Members List.
Click Multi-factor authentication on the left.
Under Multi-Factor Authenticator Apps, click the 3 dots icon next to Other Authenticator and select Remove authenticator.
Removing the authenticator will remove the current authenticator and all trusted devices.

Click Continue to confirm.
Enter your LEAP password.

A notification will be displayed to confirm that the Third Party Authenticator app has been removed.

Click to edit heading

Please note that you will also need to manually remove the account from your Third Party Authenticator app to completely clear it.

Last Modified Date

11/03/2026 2:46 pm

Title

Multi-Factor Authentication (MFA)

URL Name

Two-Factor-Authentication-2FA-NZ

Resolution