Setting Up or Editing Multi-Factor Authentication (MFA)

What is MFA?

Video Walkthrough of setting up MFA

Step-by-Step Guide to setting up your MFA

This section provides clear, step-by-step instructions to help you enable MFA on your Built account. You can choose to authenticate using SMS text messages or a third-party authenticator app.

1. Navigate to id.getbuilt.com and log into your Built account

   

2. You will be prompted with a new screen to enable two-factor authentication (2FA)

   

   1. Choose your preferred authentication method from the options listed below. Note: We recommend an authenticator app for anyone working in areas with limited mobile reception.

      1. SMS Text Message : Enter your mobile phone number to receive a verification code. If you don't see a code, double check the phone number you entered and make sure to check your Spam folder.

         

      2. Authenticator App : Open your preferred authenticator app and scan the QR code displayed on the screen.

         

3. Once you have successfully confirmed MFA is enabled for your account click "Continue" to access your Built Account.

   

Note:

• The next time you log into your account, you will be required to enter a verification code from your chosen method.

• For more information on the importance and benefits of MFA, you can visit More than a Password by CISA.

Editing your MFA method after setup

If you've recently gotten a new phone, changed your phone number, or switched authenticator apps, you may want to update your MFA method. To do so, follow the steps below.

1. Locate your account name or initials on the Navigation bar.

   

2. Click on your account name, then select My Account.

   

3. Locate the Multi-Factor Authentication section within your account page and click the three dots then Edit.

   

4. Choose your preferred authentication method from the options listed below.

   1. SMS Text Message : Enter your mobile phone number and then click Send Verification Code. Enter the verification code sent to your phone number (If you don't see a code, double check the phone number you entered and make sure to check your Spam folder). Click Verify.

   2. Authenticator App : Open your preferred authenticator app and scan the QR code displayed on the screen. Input the code from your authenticator app and click Verify.

   

5. Once verified, you'll see the method chosen as "Enabled"

Setting Up a Backup Email

A backup email is a secondary email address used to recover access to your Built account if you ever lose access to your MFA device. We recommend setting up a backup email as soon as possible.

From the login prompt

After logging in, you may be prompted to add a backup email. You can also skip this step and set it up later from Account Settings.

1. Enter your backup email address in the field provided. Click Send verification code.

   

2. A 6-digit code will be sent to that email address. If you didn't receive the code, click Resend code. Enter the 6-digit code and click Verify.

   

3. Your backup email will be shown as verified in your Account Settings.

From Account Settings

1. Click your account name or initials in the navigation bar.

   

2. Select My Account or Account Settings.

   

3. Scroll down to the Backup Email section, located beneath the Multi-Factor Authentication section.

4. Click the pencil (edit) icon.

   

5. Enter your backup email address and click Send Verification Code.

   

6. Enter the 6-digit code and click Verify. If you didn't receive the code, click Resend code.

   

Note: Use a personal email address that you can always access, separate from your Built login email.

Resetting Your MFA Device

If you've lost access to your MFA device, you can reset your MFA yourself using your backup email — no need to contact Built Support.

Note: This feature requires a verified backup email on your account. If you have not set one up, contact Built Support for assistance resetting your MFA.

1. On the MFA verification screen at login, click Forgot MFA device? Reset it here.

   

2. Enter your Built account email address and your backup email address (these will not be pre-filled), then click Send recovery code.

   

3. Check your backup email for a 6-digit recovery code and enter it on the next screen. Note: This code expires after 10 minutes.

4. Click Reset MFA.

   

MFA Troubleshooting and FAQs

Is MFA required for every user?

Yes, MFA will be enforced for every user, both on the Built Inspect App (versions 4.0.16 and above) and on Built Desktop upon each login session.

Is MFA required on each login session?

Yes, MFA will be required upon every login. However, if you are using the same device, enable the "Remember this device?" option when logging in through your MFA method. With device memory enabled, you will only need to use MFA to log in every 90 days. Note: if you switch devices, you will need to re-enable MFA on your new device.

What MFA authenticator app can I use?

You can use any MFA authenticator app you prefer. Built recommends Google Authenticator, Microsoft Authenticator, or Duo Mobile as the most popular options.

Do I have to set up MFA again if I change my phone number?

If you have selected SMS as your authenticator method and change your phone number, you will need to re-enable MFA. You can do this by clicking Edit in the Multi-Factor Authentication section of your account settings. If you no longer have access to your old number, use the Forgot MFA device? Reset it here option on the login screen — see Resetting Your MFA Device above for instructions.

Can I log in with MFA even if I don't have cellular service?

If you have selected SMS as your authenticator method, service will be needed to receive a text message. For this reason, Built recommends choosing an Authenticator App for any users who may use Built when out of service areas (ie, Built Inspectors)

Can I use both SMS and Authenticator App methods?

No, currently MFA setup requires users to choose one method. However, the method chosen can be changed at any time. See How to edit your MFA method after setup above.

If I login through Single Sign-On, do I also need to enable MFA?

No, users who login through Single Sign-On (SSO) enforcement are not required to use MFA as well. Learn more about Single sign-on here.

What if multiple people use the same email address (account) to login to Built?

Shared credentials are generally not recommended for security reasons, however, this may be standard practice for some organizations. If multiple people use the same account in Built, setup MFA using the Authenticator App method only.

Can I receive an MFA code through my email?

No, email is not available as an MFA verification method — the available methods are SMS and Authenticator App only. However, you can add a backup email to your account to receive a one-time recovery code if you ever lose access to your MFA device. See Setting Up a Backup Email above.

Do I need a QR code every time I login through MFA using an Authenticator App?

No, the QR code that displays is only for setting up MFA through the Authenticator App. Once MFA is enabled, users login through the code displayed within the Authenticator App.