Multi-Factor Authentication (MFA)

Multi-Factor Authentication (MFA)

Note: MFA is only mandatory for web user of MyTerminal. No MFA is required to log in to MyTerminal within the ECT app.

The security of your MyTerminal account is very important to us and we want to ensure that your data is well protected. That is why Multi-Factor Authentication (MFA) is mandatory when logging in to MyTerminal.

What is MFA?

MFA is an extra layer of security that ensures that only you have access to your online account. It requires an extra step during the login process, where additional information must be provided in addition to your username and password. With MFA, your account is significantly better protected against unauthorized access. Even if someone has your password, they won't be able to log in without the extra verification step.

MFA is a personal verification method. It does not work with group email addresses. To ensure the highest level of security, every user must set up MFA individually. So, if you don't have your own (business) MyTerminal account yet, please ask your MTA (MyTerminal Administrator) to add you as a user.

The flow within MyTerminal

Setting up MFA only needs to be done once. Log in to MyTerminal using your preferred login provider. Next you will be prompted to choose one of the following three authentication methods:

  • Telephone number
  • Authenticator App (e.g., Google Authenticator, Microsoft Authenticator, Authy)
  • Hardware authentication key (e.g., Yubikey, Feitian, Google Titan Security Key)

How to set-up MFA

Phone number

Please enter the telephone number at which you would like to receive a text message. Enter your country code and a personal telephone number, and choose whether you want to receive a text message. Each time you log in to MyTerminal, a token will be sent to your phone.

Authenticator App

Open or download an authenticator app of your choice on your phone. There are several authenticator apps you can use (e.g, Google Authenticator, Microsoft Authenticator, Authy). Scan the QR code with your authenticator app to establish the connection. Each time you log in to MyTerminal, a token will be sent to your authenticator app.

Hardware authentication key

Please insert your hardware authentication key (e.g., Yubikey, Feitian, Google Titan Security Key) and follow the instructions provided by your authentication key software on your computer to connect with MyTerminal. Each time you log in to MyTerminal, a 6-digit token will be sent to your hardware authentication key software.

Frequently asked questions

Is MFA mandatory for both MyTerminal web platform and the ECT app? MFA only applies to users of the MyTerminal web platform. No MFA is required to log in to MyTerminal within the ECT app.

We have a MyTerminal account with a department or group email address. Multiple colleagues use this email address to log in to MyTerminal. How can we set-up MFA? MFA is a personal verification method and can therefore not be set-up for department or group email addresses such as for example import@company.com. The Electronic Communication Procedure (ECP), which applies to MyTerminal, even describes that department or group email addresses are not allowed. The email address must be personal. Ask your MyTerminal Administrator to invite you with your personal email address and refer to the following instruction. We understand that this change may raise questions, especially regarding any potential costs that may arise due to an increase in the number of users in your account and the additional expenses that may result from this. We regret any inconvenience this may cause, but we want to emphasize that these measures are being implemented to ensure the security and privacy of your data.

Can I switch MFA methods once I've selected one? When logging in at MyTerminal you can select the reset MFA option instead of Send code. This disconnects your current authentication method. To successfully disconnect, you will have to use your current authentication method once more. After this you can set up MFA again (see The flow within MyTerminal)

I've lost my phone, what should I do? For example: If you have lost your phone and Multi-Factor Authentication (MFA), you can try one of the following suggestions to recover MFA and regain access to the website:

  1. You can independently look up the reset procedure online of the relevant authentication app or hardware key. ECT cannot recover this for you. If you have used an authenticator app like Google Authenticator, you will probably need to reinstall it on your new phone and restore the MFA configuration. This usually requires scanning a QR code or enter a recovery code.
  2. Restoring the authenticator app: If you have used an authenticator app like Google Authenticator, you will need to reinstall it on your new phone and restore the MFA configuration. This usually requires scanning a QR code or enter a recovery code.
  3. Resetting MFA: If none of the above options are available, you may need to reset the MFA settings at MyTerminal. You can request this by emailing myterminal@ect.nl. We may be able to remove the connection for you. Upon your next login, you can choose MFA again, but you will need to verify your identity. In this case, please provide a valid identification document and your phone number in your email to us, so we can contact you to verify it.