Use authenticator apps and passkeys for Multi-Factor Authentication (MFA)

Marketplacer provides administrators with enhanced security options for their accounts. You can use authenticator apps, such as Google Authenticator or 1Password, or set up Passkeys for MFA. Passkeys also support passwordless login when configured appropriately.

Enable authentication apps for MFA

1. Sign in to the operator portal.
2. Click the profile icon () on the top right corner.
3. Select My Details & Password.
   
4. Under the Multi-Factor Authentication section, click the Set up authenticator button.
   
5. Enter your password when prompted.
6. Click the Create button.
7. Open your phone's authenticator app (for example, Google Authenticator or 1Password).
8. Scan the QR code displayed in the Marketplacer operator portal.
9. Enter the one-time code generated by your app in the Enter an authenticator code field in the Marketplacer operator portal.
10. Click Activate.

Enable Passkeys for MFA

Set up a Passkey

1. Sign in to the operator portal.
2. Click the profile icon () on the top right corner.
3. Select My Details & Password.
   
4. Under the Multi-Factor Authentication section, click the Set up a passkey button.
   
5. Enter a name describing your Passkey.
6. Enter your current password.
7. Check the Passwordless? box if you want to enable passwordless login (optional).
   
   Note: If you check the Passwordless? box when creating a passkey, the passkey can still be used for MFA even if passwordless login is not enabled for the hardware or software passkey. If passwordless login is enabled later, you can use the same passkey to log in without a password.
8. Click Create.
9. Follow the instructions provided by your browser:
   
   • For hardware Passkeys (e.g., Yubikey), plug in the device and press the button.
   • For software Passkeys (e.g., 1Password), click the Save Passkey button when prompted.
10. Your Passkey is now successfully configured.

Enable Passkey login for administrators

If enabled, administrators can log in with a passwordless passkey. If not, passkeys can still be used but only after entering a password.

1. Sign in to the operator portal.
2. Go to Configuration > Authentication Settings.
3. Under Administrator Authentication, check the Allow Passkey login box.
   
4. Click Submit.