TABLE OF CONTENTS

         

What is email authentication

Email authentication is the fallback second factor on First AML. By default, all users have multi-factor authentication (MFA) enabled, and they verify their identity at login using an authenticator app or security key. If MFA is switched off for a user - either by themselves or by an admin in their organisation - the platform falls back to emailing a six-digit one-time password (OTP) at each login. See Multi-factor authentication (MFA) for our recommended setup.


Why do I need it? 

Email authentication enhances the security of your account by ensuring that only you can log into your platform. This reduces the risk of unauthorized access, keeping your personal information and account activities secure.


How does this benefit me?

  • Adds a layer of security to your account that helps prevent bad actors from gaining access.

  • Protects access to your clients’ sensitive data and information.

  • Reduces the likelihood that you’ll be a victim of an attack.


How do I use it?                 

  1. Log in: Enter your email and password on the login page.
  2. Receive OTP: After submitting your credentials, a unique six-digit code (OTP) will be sent to the email address you entered.
  3. Enter OTP: Check your email for the OTP and enter it in the required field on the login page.
  4. Access account: Once the OTP is verified, you’ll gain access to your account. 




Troubleshooting:

I didn’t receive the email with my OTP? 

  • Ensure you have entered the correct email during the login process.
  • Check your spam/junk folder.
  • Wait a few minutes, the email may be slightly delayed.
  • Ensure that you are checking the correct email account. The authentication code is sent to the email address associated with your First AML account. If you still don’t receive the email, please contact our support team help@firstaml.com
  • The code is sent from noreply@firstamlusers.com. Check that this sender isn't being blocked or filtered. If your IT team manages an allowlist, ask them to add this address.

My code isn’t working? 

  • Make sure you’ve entered the code exactly as it appears in the email. 

  • The OTP is valid for a limited time, so use it promptly. If too much time has elapsed click the “Resend” button on the login page to get a new code.


I’m still having issues.

  • Contact our support team on help@firstaml.com 


Frequently Asked Questions:

What else can I do to secure my account?

  • MFA is the default and most secure way to verify your identity on First AML. If MFA is currently off for your account, we strongly recommend turning it back on. See Multi-factor authentication (MFA) to get started. If you have any questions, please reach out to security@firstaml.com.

Do I need to set up my email authentication?

  • Email authentication only kicks in if MFA is switched off for your account. With MFA on (the default), you won't see email codes - you'll use your authenticator app or security key instead.

Can I turn off email authentication?

  • Email authentication only applies when MFA is off. Enabling MFA replaces email authentication with an authenticator app or security key, which is faster and more reliable. We strongly recommend keeping MFA on. See Multi-factor authentication (MFA).

What if I lose access to my email?

  • Contact our support team for assistance on help@firstaml.com 

How often will I need to authenticate via email?

  • When signing in you can select the option to ”Remember this device for 30 days”. You will only need to re-enter the code after 30 days. Otherwise, you’ll be prompted to authenticate whenever there’s a login attempt on your account.

Can I use a different email for authentication?

  • The authentication code is sent to the email address associated with your First AML account. Contact our support team if you need to change the email address related to your account.

Why is my email code taking so long to get to my inbox?

  • You may need to discuss with your IT team to ensure that First AML is whitelisted by your email servers.