Drake Portals - Taxpayer Multi-Factor Authentication (MFA)

Article #: 16521

Last Updated: November 06, 2024

 

Tags: SFPSecureFileProDrake Portals

Drake Portals logo

After a taxpayer sets up their Drake Portals (SecureFilePro) password, they have the option to enable two-factor authentication, also known as multi-factor authentication (MFA). Taxpayers can opt-in to MFA via several methods, including two-factor authentication applications (such as Google Authenticator), email, or text message. Once MFA has been activated, the taxpayer must use both their login information and MFA authentication code to log in to their Drake Portals account.

Note  This article describes the MFA process for taxpayers, not preparers and firms. MFA for firms must be set up through the Drake User Manager and applies to all Drake Software web-based applications. For more information on enabling MFA for firms, see Drake User Manager – Overview and Configuration.

Taxpayers must set up MFA by logging in to their account, clicking on their username in the top-right, and selecting Account.

The Two Factor Authentication section of the Account page

From there, they can choose their preferred MFA setup:

Note  If a taxpayer is unable to log in for any reason, they must contact their preparer, who must reset their password and MFA method for them. See Taxpayer Unable to Sign In for more information.

Taxpayer MFA Setup

Note  This section describes setting up MFA from the taxpayer's point of view. If your client is having trouble setting up MFA, provide them with the applicable instructions below.

Authenticator Application

  1. On your mobile device, download an authenticator app, like Google Authenticator.

  2. Under the Two Factor Authentication section, choose Application.

  3. On the mobile device, link the authenticator app to your portal by either:

    • Scanning the QR code

    • Clicking and entering the Manual code

  4. Follow the instructions on the authenticator app. The app eventually displays a six-digit code.

  5. On the portal's Application Set Up dialog box, click Continue.

  6. On the Confirm Application Code dialog box, enter the code, and click Confirm.

Email

  1. Under the Two Factor Authentication section, choose Email. A six-digit code is automatically sent to the email on file.

  2. Enter the six-digit code and click Confirm.

Text Message

Note  Your phone must be capable of receiving SMS messages to use this feature. Standard text messaging rates apply.

  1. Under the Two Factor Authentication section, choose Text.

  2. Enter your mobile phone number and click Confirm. A six-digit code is sent to the phone via text message.

  3. On the Confirm Phone Number dialog box, enter the code, and click Confirm.

Taxpayer Unable to Sign In

If a taxpayer cannot confirm their identity via MFA (such as in the case of a new phone number), the preparer must reset their password and remove the existing MFA method on file. No taxpayer files or data are lost during this process. To reset a taxpayer's password:

  1. Log in to your Drake Portals account.

  2. Select the three vertical dots Three vertical dots icon beside the applicable client.

  3. Choose Activation Email.

  4. An email is sent to the client. Upon clicking the link in the email, the client is redirected to their portal, where they must confirm the last four digits of their SSN and create a new password. If the taxpayer chooses to, they can reactivate MFA at this time.