Multi-Factor Authentication | Account | GM Support
about

Understanding Multi-Factor Authentication (MFA)

Explore how to set up and manage Multi-Factor Authentication (MFA) for enhanced security. Discover how MFA works, its benefits and how to make the most of it.

Multi-Factor Authentication (MFA)

MFA, or Multi-Factor Authentication, is an additional layer of security used to protect your account from unauthorized access. When you sign in, you'll be required to confirm your identity by entering a security code sent to your email, SMS, or through an Authenticator App, depending on your preference.

MFA provides enhanced security by requiring a second form of verification beyond just your password. This helps ensure that the person accessing the account is truly you. We have implemented MFA for all users to safeguard your personal information and account details.

You cannot disable MFA. It is mandatory for all users to ensure maximum security for your account. 

How MFA Works

After entering your password, you'll be prompted to enter a security code. By default, we'll send an email with the verification code. (If you prefer, you can switch to receiving the code via SMS or use an Authenticator App after you've signed in.)

It might take a few minutes for your code to arrive via email or SMS. If you don't receive your code:

  • Check your spam folder.
  • Ensure you're checking the correct phone number or email.
  • If using an Authenticator App, your code is always available and refreshes every 30 seconds.
  • Make sure you have an internet connection or mobile signal, and turn off "do not disturb" mode. Verify your notifications are turned on.
  • If you request multiple codes, only the newest one will work for login.
  • If you're experiencing delays, try switching to a different MFA method.  

Note: If you don't have access to your mobile device for SMS or Auth App MFA, you won't be able to access your account. In this situation, please contact our customer support for assistance. 

Switching Your MFA Method

Once you're signed in:

  • Go to your Account Security page.
  • Under the Multi-Factor Authentication section, choose the MFA option you want to enable (email, SMS, or Authenticator App).

Please note that if you already have MFA set up, you'll need to disable your current method before selecting a new one. 

Authentication Frequency

You may be prompted to authenticate through MFA every time you sign in to your account. However, there are options to reduce authentication frequency:

  • In our mobile apps, once you have completed MFA, you will remain signed in for up to a year (365 days).
  • For web access, you have the option to select “Keep Me Signed In,” which allows your web browser to remember your login and keep you signed in for up to 30 days, reducing the need to complete MFA every time you access your account. This option should not be used on public or shared devices.

For your security, please don’t include personal info such as phone number, address or credit card details.

Q&As

Are there any changes to MFA planned for the future?

We're committed to providing you with a secure and user-friendly experience. As part of this commitment, we regularly review and update our security features. Rest assured, any changes to the MFA process will be made with your security and convenience in mind.

Looking for something else?

Need more help?

Communicate with one of our specialists.

To find out if your vehicle has this feature, contact your dealer or refer to your vehicle’s equipment list. Please check your Owner’s Manual for more information about features.