New: AI-assisted search! Ask questions and follow-ups in full sentences for smarter, faster help. Try asking things like “How do I approve or submit a draw?” or "How do I accept my payment?"

Setting Up or Editing Multi-Factor Authentication

Prev Next

What is MFA?

Multi-Factor Authentication (MFA) or Two-Factor Authentication (2FA) is an essential security feature that adds an extra layer of protection to your Built account. It helps prevent unauthorized access and fraud by requiring users to verify their identity through a secondary method beyond just a password. Built has adopted a "most-protective" approach to security in compliance with state regulations and to better safeguard user information and payment transactions.


Video Walkthrough of Setting Up MFA


Step-by-Step Guide to Setting Up MFA

This section provides clear, step-by-step instructions to help you enable MFA on your Built account. You can choose to authenticate using SMS text messages or a third-party authenticator app.

  1. Navigate to id.getbuilt.com and log into your Built account

  2. You will be prompted with a new screen to enable two-factor authentication (2FA)

    1. Choose your preferred authentication method from the options listed below. Note: We recommend an authenticator app for anyone working in areas with limited mobile reception.

      1. SMS Text Message : Enter your mobile phone number to receive a verification code. If you don’t see a code, double check the phone number you entered and make sure to check your Spam folder.

      2. Authenticator App : Open your preferred authenticator app and scan the QR code displayed on the screen.

  3. Once you have successfully confirmed MFA is enabled for your account click “Continue” to access your Built Account.

Note:

  • The next time you log into your account, you will be required to enter a verification code from your chosen method.

  • For more information on the importance and benefits of MFA, you can visit More than a Password by CISA.


Editing the MFA Method after Setup

Once MFA is set up, you can change your MFA method. Follow the instructions below to change the phone number that receives your MFA codes, or toggle between SMS and an Authenticator App, as preferred:

    1. Log in to Built at id.getbuilt.com

    2. Locate your account in your navigation bar and click the dropdown arrow

      User interface showing the Built Builder feature with a dropdown menu option.

  1. Select My Account from the menu

    User account section with options for managing personal information and settings.

  2. Locate the Multi-Factor Authentication (MFA) Section and click the three dots menu

    Multi-Factor Authentication is enabled, enhancing security with an authenticator app.

  3. Select Edit

  4. A window will open, prompting you to choose your preferred MFA method

  5. Choose Your Method

    1. SMS: Receive a verification code via text message

    2. Authenticator App: Use an app like Google Authenticator to receive a verification code

  6. Follow the steps to complete verification of your chosen method

  7. Once verified, you’ll see the method chosen as Enabled

A button labeled 'Enabled' indicating an active status in a user interface.

Note:

MFA cannot be disabled, as this is a security requirement enforced for all accounts.

Feature Overview: ‘Remember this Device’

MFA will be required upon every login. However, if you are using the same device, enable the "Remember this device?” option when logging in through your MFA method. With device memory enabled, you will only need to use MFA to log in every 90 days. Note: if you switch devices, you will need to re-enable MFA on your new device.

Checkbox option to remember this device for easier future logins without authentication.

Troubleshooting Note:

Some users may see repeated MFA prompts despite selecting “remember my device” due to internal security settings. Policies that clear browser data, use virtual desktops, or enforce frequent reauthentication can prevent Built from saving the local browser token required for this feature. We recommend contacting your internal IT team to see whether trusted devices can be remembered while still meeting security requirements.


FAQ

What is Multi-Factor Authentication (MFA)?

Multi-Factor Authentication (MFA) is a security feature that adds an extra layer of protection to your Built account by requiring users to verify their identity through a secondary method beyond their first set of account credentials (email address and password).

Is MFA required for every user?

Yes, MFA is enforced for every user on both the Built Inspect App and Built Desktop upon each login session.

What methods can I use for MFA?

You can authenticate using SMS text messages or a third-party authenticator app, such as Google Authenticator or Microsoft Authenticator.

Do I need to set up MFA again if I change my phone number or device?

Yes, you may need to re-enable MFA in the following circumstances:

  • If you have selected SMS as your authentication method and have changed your phone number.

  • If you have selected the Authenticator app as your method and have not synced the application and its data to your new device.

Contact Built Support for assistance in resetting your MFA.

Can I log in with MFA if I don’t have cellular service?

No, if you have selected SMS as your authenticator method, you will need cellular service to receive a text message. It is recommended to use an Authenticator App for users in areas with limited service. (ie, for use with the Built Inspect App)

Can I use both SMS and Authenticator App methods for MFA?

No, currently you must choose one method for MFA, but you can change your method at any time. See how to edit your MFA method after setup above.

What if multiple people use the same email address to log in to Built?

Shared credentials are not recommended for security reasons, but if necessary, it is advised to set up MFA using the Authenticator App method only.

Can I receive an MFA code through my email?

No, the available MFA methods are SMS and Authenticator Apps only, as your email address is included in the primary authentication stage.

Do I need a QR code every time I login through MFA using an Authenticator App?

No, the QR code that displays is only for setting up MFA through the Authenticator App. Once MFA is enabled, users login through the code displayed within the Authenticator App.

How long are MFA codes valid before they expire?

  • Authenticator app codes (e.g., Google Authenticator, Authy): These typically expire every 30 seconds, which is standard for time-based one-time passwords (TOTP).

  • SMS codes: These are valid for up to 3 minutes after they are sent.

Footer Example