Multi-Factor Authentication (MFA)

Core Functionality Multi-Factor Authentication (MFA), also referred to as Two-Factor Authentication (2FA), is a mandatory security layer for all EasyPark accounts. It requires two distinct steps to verify identity: something the user knows (phone number/username) and something the user possesses (a one-time verification code sent via SMS).

MFA Login Workflows

• EasyPark App:

  1. Enter mobile phone number.

  2. Receive 4-digit verification code via SMS.

  3. Enter code to gain access. (No password required).

• Self-Service Portal (Website):

  1. Enter phone number as the username.

  2. Receive verification code via SMS.

  3. Enter code to access the dashboard. (No password required).

Secondary Verification (Security Trigger) In specific high-security scenarios—such as logging in for the first time on a new device or after multiple failed attempts—the system may trigger an additional verification step:

• Requirement: The user must enter the license plate number of the vehicle most recently used in the account.

Critical Rules & Logic

• Mandatory Status: MFA cannot be disabled. It is a core security requirement to protect personal and billing data.

• Phone Number Dependency: Since the "possession" factor is the mobile device, account access is strictly tied to the registered phone number.

• Security Lockout: Entering an incorrect verification code multiple times will trigger a temporary security block. The user must wait before a new code can be requested.

• No Passwords: EasyPark has transitioned to a passwordless system for most users, relying entirely on the MFA/SMS flow for authentication.