Skip to main content

Phone (SMS) MFA for Internal Users

Now offering MFA codes as back up to email for internal users

Written by Eric Range
Updated this week

Released: March 19, 2026

If you receive an error stating that your code must be 8 digits but you’ve entered a 6-digit code, try clearing your browser cache or performing a hard refresh. Then attempt the process again. This should resolve the validation error.

Overview Header

Element 451 now supports phone-based (SMS) multi-factor authentication (MFA) as an optional backup method for internal users who sign in with an Element451 username and password. Previously, MFA codes for platform access were sent only to the email address associated with a user’s account. While that process worked well in most cases, it could prevent access when institutional email systems or major providers experienced outages outside of the control of Element451.

With this update, administrators can enable SMS MFA for internal users, allowing users to add and verify a cell phone number in their account profile. Once verified, users can choose to receive a login verification code by text message if they are unable to access their email. This provides an additional authentication option while keeping email as the default delivery method.

Details Header

Important info for Element451 Administrators

  • New admin setting in Manage Users > Security to enable or disable phone-based MFA for internal users

  • Optional configuration so institutions can decide whether to offer SMS MFA based on internal security policies

  • This backup authentication method that helps reduce login disruption during institutional or third-party email outages

  • Email remains the default MFA channel even when SMS MFA is enabled

Important info for Users

  • New Cell Phone field in Manage Account profile for adding a mobile/sms enabled number used only for MFA

  • Private phone usage so the cell phone number is not displayed publicly

  • Renamed Office Phone Number field to distinguish public-facing office contact details from the MFA cell phone number

  • Phone verification process that validates the number and enables SMS delivery once the number is confirmed

  • Updated login flow with a “Try a different method” option that lets verified users request a code by text message

  • Continued email delivery so users still receive an MFA code by email even when they choose to also receive one by SMS

Benefit Header

This update improves account access reliability for internal users by providing a secondary MFA option when email is temporarily unavailable. It gives institutions more flexibility in how they manage secure access, while giving users a practical fallback that reduces login interruptions and helps maintain continuity during email service issues.

Did this answer your question?