IntelligentTaxProduct Documentation
⌘ K
中文

Common

Account security

Available

Change your password and manage MFA, authenticators, and recovery codes.

What this menu does

Let every signed-in user strengthen and recover their own account without exposing security secrets to other users.

Where to find it

Open the account menu in the top-right corner, select Profile, then open Password or MFA settings.

When to use it

  • Change the current password.
  • Enable an authenticator app.
  • Generate replacement recovery codes.
  • Disable MFA after confirming the impact.

Before you begin

  • Use an account issued for the intended portal.
  • Use a supported desktop or mobile browser.

Page regions

  1. 01Profile and password settings
  2. 02MFA status
  3. 03Authenticator setup QR code
  4. 04Verification code field
  5. 05Recovery-code list
  6. 06Disable confirmation

Supported operations

01

Change your password

Purpose
Replace the password while already signed in.
  1. 1

    Open Profile and select Change password.

  2. 2

    Enter the current password and the new password.

  3. 3

    Submit the change.

  4. 4

    Use the new password the next time you sign in.

Result

The password changes for this account only.

02

Enable MFA

Purpose
Bind an authenticator app to the current account.
  1. 1

    Open Profile and select Bind MFA.

  2. 2

    Start setup and scan the QR code with an authenticator app; use the displayed secret only if scanning is unavailable.

  3. 3

    Enter the current authenticator code and verify.

  4. 4

    Copy the generated recovery codes to a secure offline location before closing the panel.

Result

MFA becomes required on later sign-ins and recovery codes are issued once for safekeeping.

03

Regenerate recovery codes

Purpose
Replace recovery codes when they were exposed, lost, or nearly exhausted.
  1. 1

    Open Profile and Manage MFA.

  2. 2

    Select Regenerate recovery codes.

  3. 3

    Save the new codes securely.

  4. 4

    Destroy any previously saved recovery-code list because old codes no longer apply.

Result

A new recovery-code set replaces the previous set.

04

Disable MFA

Purpose
Remove authenticator protection from the current account when policy allows it.
  1. 1

    Open Profile and Manage MFA.

  2. 2

    Select Disable MFA.

  3. 3

    Read the security impact and confirm.

  4. 4

    Sign out and sign in again if you want to verify the new login behavior.

Result

The factor and recovery codes are removed from the account.

Business rules and fields

  • Never copy MFA secrets, QR codes, or recovery codes into tickets or chat.
  • Recovery codes are single-use.
  • Regenerating codes invalidates the previous set.
  • Administrators can reset MFA for some managed accounts, but cannot retrieve the user's secret.

States you may see

MFA disabledSetup pending verificationMFA enabledRecovery codes regeneratedMFA disabled after confirmation

What happens next

  • Security changes apply to the signed-in account and are reflected in later login challenges.
  • Sensitive setup values are not shown again after the setup flow closes.

Common problems

What you seeWhy it happensWhat to do

MFA setup or recovery-code generation fails.

The session security token is missing, the verification code is invalid, or the request failed.

Keep the panel open, use the newest authenticator code, and retry once. Sign in again if the page reports a missing session.

Visibility and access

The available controls follow the signed-in portal, account status, and assigned business access.

System screenshots

The account panel shows MFA status and the controlled setup or recovery actions.