Security

    Multi-Factor Authentication (MFA)

    Stronger account security, built into the Vestr Finance experience

    Effective: April 15, 2025Last Updated: April 15, 2025

    At Vestr Finance, protecting account access is a core part of how we safeguard client information, financial workflows, and platform integrity. That is why we use Multi-Factor Authentication (MFA) as an added layer of protection beyond a password alone.

    MFA helps reduce the risk of unauthorized account access by requiring a second form of verification during login or when sensitive account changes are made.

    1. What is MFA?

    Multi-Factor Authentication is a security process that requires a user to verify their identity using two or more factors.

    These factors generally include:

    • Something you know — such as your password
    • Something you have — such as an authenticator app or mobile device
    • Something you are — such as a biometric identifier, where supported

    By combining multiple factors, MFA significantly lowers the likelihood of compromised credentials leading to unauthorized access.

    2. How MFA Works at Vestr Finance

    When MFA is enabled for your account, the login process includes an additional verification step after your password is entered.

    A standard login flow may look like this:

    1. Enter your email address and password
    2. Complete your second verification step
    3. Access your account securely

    Depending on the implementation and account type, that second verification step may be required during:

    • Login from a new device
    • Login from an unfamiliar location
    • Password resets
    • Changes to security settings
    • Access to sensitive account or billing functions

    3. Supported Verification Methods

    Vestr Finance is designed with support for modern MFA methods, including:

    Authenticator app codes (recommended)

    Time-based one-time passcodes generated by apps such as Google Authenticator, Microsoft Authenticator, or Authy provide a strong balance of security and convenience.

    SMS verification

    Text message verification may be available in certain cases as a secondary or fallback option.

    Email verification

    Email-based one-time codes may be used in limited recovery or fallback scenarios.

    Hardware security keys and passkeys

    As the platform evolves, Vestr Finance may support stronger phishing-resistant methods such as WebAuthn, passkeys, or hardware security keys.

    4. Why MFA Matters

    Passwords can be guessed, reused, stolen, or exposed through phishing attempts and third-party breaches. MFA adds another checkpoint that makes those credentials far less useful to an attacker on their own.

    For Vestr Finance users, MFA helps:

    • Protect account access
    • Reduce fraud and unauthorized changes
    • Improve the security of sensitive financial activity
    • Strengthen trust across the platform

    5. Recovery and Backup Options

    We understand that users can lose access to a device or authentication method. Where applicable, Vestr Finance may provide backup and recovery options such as:

    • Backup codes generated during setup
    • Verified recovery workflows
    • Additional identity verification for account restoration

    Recovery measures are designed to balance user access with strong account protection.

    6. Security Best Practices for Users

    To get the most benefit from MFA, we recommend that users:

    • Use an authenticator app whenever possible
    • Store backup codes in a secure location
    • Avoid reusing passwords across platforms
    • Keep account recovery information current
    • Contact support immediately if suspicious login activity is noticed

    7. Our Commitment to Secure Access

    MFA is one part of Vestr Finance's broader approach to platform security. We continuously evaluate authentication practices, account protections, and access controls to help keep our systems and user accounts secure.

    If you have questions about account security or need help with authentication, please contact the Vestr Finance support team.