Skip to main content

User Guide: How to Set Up Multifactor Authentication

Multifactor Authentication (MFA) requires users to log in with the correct User ID, password, and another form of authentication, such as identity confirmation through an authentication app or an email address. Access to Fannie Mae browser-based applications requires the use of MFA.

This guide explains how to set up the MFA verification method during first-time login, including:

The user must setup at least one MFA verification method to access Fannie Mae systems.

The table below provides an overview of all available MFA verification methods:

MFA MethodDescription
Third-Party Authenticator AppRetrieve a 6-digit code through a third-party application such as DUO, Google or Microsoft Authenticator. The user is prompted to enter the code into the interface.
Fido 2Use your FIDO2 authentication such as Biometrics in your device like fingerprint or facial recognition, Passkeys, Security Keys to verify MFA identities.
EmailReceive an email with a 6-digit code at the email address registered with Fannie Mae. The user is prompted to enter the code into the interface.

 

Protect Your Account
 

Set Up Third-Party Authenticator App

This section explains how to set up the third-party authenticator method. When utilizing this method, the user retrieves a 6-digit code through a third-party app such as Duo, Google or Microsoft Authenticator and is prompted to enter the code into the interface.

  1. Log in to a Fannie Mae browser-based application for the first time.
  2. After providing the correct User ID and password, the user will be prompted to set up the MFA verification method via the Help Us Protect Your Account panel

  3. If not yet done, please download and install the desired third-party authenticator app from the App Store or Google Play on your device.

    Note: The following third-party apps have been tested and validated: Google Authenticator, Microsoft Authenticator, and Duo.

  4. Click the Set Up button next to Third-Party Authenticator App.
     
Protect Your Account

  1. If desired, change the Device Nickname, then select Continue.

    Note: Nickname will auto populate but user can update the Nickname.

    The Device Nickname can contain numbers, letters, and the following special characters: space ( ), asterisk (*), hyphen (-), underscore (_), and apostrophe (‘). The maximum length is 30 characters.

  2. Scan the QR code using the third-party authenticator app, then select Continue.

  3. Enter the 6-digit code from the third-party authenticator app in the boxes, then select Verify.

    Note: User has 6 attempts to enter the valid code. If the code expires, enter the new code from the third-party authenticator app.

  4. Once successfully registered, the user has the option to:

    • Set third-party authentication app as the preferred authentication method
    • Continue to Application
    • Set up more verification methods
    • Manage MFA settings

    Notes:

    To set this method as your preferred verification method, click the Set as preferred verification method checkbox. The Set up more verification methods option will be unavailable once you click the Set as preferred verification method checkbox. To set up more verification methods, you can always select Manage MFA Settings.

    Refer to User Guide: How to Manage Multifactor Authentication for more information on how to manage MFA settings.

  5. The user will receive a confirmation email upon receipt of the success notification.
 

Set Up Email Method

This section explains how to set up the email authentication method. When utilizing this method, the user receives a 6-digit code at the email address registered with Fannie Mae and is prompted to enter the code into the interface. Fannie Mae registered email address method will be available for all users.

  1. Log in to a Fannie Mae browser-based application for the first time.
  2. After providing the correct User ID and password, the user will be prompted to set up the MFA verification method via the Help Us Protect Your Account panel
  3. Click the Set Up button next to Email.
     
Protect Your Account

  1. Enter the 6-digit code sent to the email address registered with Fannie Mae in the boxes, then select Verify.

    Note: User has 6 attempts to enter the valid code. The code is valid for 15 minutes. If the code expires, select Resend Code to receive new code.

  2. Once successfully registered, the user has the option to:

    • Set email as the preferred authentication method
    • Continue to Application
    • Set up more verification methods
    • Manage MFA settings

    Notes:

    To set this method as your preferred verification method, click the Set as preferred verification method checkbox. The Set up more verification methods option will be unavailable once you click the Set as preferred verification method checkbox. To set up more verification methods, select Manage MFA Settings.

    Refer to User Guide: How to Manage Multifactor Authentication for more information on how to manage MFA settings.

  3. The user will receive a confirmation email upon receipt of the success notification
 

Set up Security Key Steps

This section explains how to set up the Security Key authentication method for Fannie Mae multifactor authentication. The User can verify their identity by simply plugging a security key into the computer’s USB port. Different types of security keys are available for purchase from your preferred retailer.

Once you pair your security key with Fannie Mae multifactor authentication, your next log in will prompt you to touch the security key to verify your identity.

  1. Log in to any Fannie Mae browser-based application.
  2. After providing the correct User ID and password, the user will be prompted to set up the MFA verification method via the Help Us Protect Your Account panel.
  3. Click the Set Up button next to Security Key.
     

Notes:

FIDO2 is now available for MFA, allowing you to take advantage of modern, phishing-resistant authentication methods for improved security.

Protect Your Account
  1. Click the Continue button on the Setup Your Security Key screen.

  2. Select USB Security Key on the new pop-up screen.

    Note: Screen appearance may vary depending on the type of browser, browser version and security key brand that is used.

  3. Insert and touch the security key.

    Note: Screen appearance may vary depending on the type of browser, browser version and security key brand that is used.

  4. Enter the PIN for your security key if required.

    Note: Screen appearance may vary based on security key brand used or how the initial registration was done.

  5. Touch your security key again to complete the request.

    Note: This screen might look different for different brands of Security Key or how initial registration was done.

  6. Once the security key is properly registered, enter a nickname for your security key on the Create a Nickname screen.

  7. Click Continue.
    Once successfully registered, the user has the option to set security Key as the preferred authentication method before selecting of the following options:

    • Continue to Application;
    • Set up more verification methods; or
    • Manage MFA settings

    Notes:

    The Set up more verification methods option will be unavailable once you click the Set as preferred verification method checkbox. To set up more verification methods, you can always select Manage MFA Settings.

    Refer to User Guide: How to Manage Multifactor Authentication for more information on how to manage MFA settings.

  8. The user will receive a confirmation email upon receipt of the success notification.
 

Success Notification

The Success Notification panel is returned upon completion of a registration method(s). After the initial selection of an authentication method the user can establish additional verification methods by clicking on the Set up more verification methods link. The Set as preferred method checkbox defines the registered method as the default authentication method. The user can opt to go directly to the application by clicking the Continue to Application button. The user can also click the Manage MFA settings link to add an additional MFA verification method, delete MFA verification method, change preferred MFA verification method, and change device nickname.


 

This section explains how to set up the MFA verification method.

  1. Log in to a Fannie Mae browser-based application for the first time.
  2. After providing correct User ID and password, you will be prompted to set up the MFA verification method.

Notes:

The available MFA verification methods depend on the MFA Package selected by your Corporate Administrator.

If you want to skip MFA setup, select Skip for Now. This option is only available until the Enforcement Date selected by your Corporate Administrator.

The table below provides an overview of all available MFA verification methods:

MFA Method Description
Fannie Mae Authenticator

Recommended method – fastest and easiest

Get a push notification through the Fannie Mae Authenticator app. The user is prompted to approve the push notification from the app.
Third-Party Authenticator Get a 6-digit code through a third-party app such as Google or Microsoft Authenticator. The user is prompted to enter the code into the interface.
Text Message Get a 6-digit code in an SMS text message. The user is prompted to enter the code into the interface.
Automated Phone Call Get a 6-digit code in an automated phone call. The user is prompted to enter the code into the interface.
Email Get an email with a 6-digit code at the email address registered with Fannie Mae. The user is prompted to enter the code into the interface.

 

This section explains how to set up the Fannie Mae Authenticator method.

  1. Select the Set Up button next to Fannie Mae Authenticator.
  2. Select your device’s operation system: iOS or Android.
  3. Scan the QR Code to download and install the Fannie Mae Authenticator app on your device.
  4. Scan the QR code using the Fannie Mae Authenticator app to pair your device.
  5. From the Fannie Mae Authenticator app, edit the account name if desired, then select the circle check mark
  6. Once successfully registered, you have the option to Continue to Application, Set up more verification methods, or Manage MFA settings.

Notes:

If you want to set this method as the preferred verification method, select the Set as preferred verification method checkbox. The Set up more verification methods option will become unavailable. If you want to set up more verification methods, select Manage MFA settings.

Refer to Manage Multifactor Authentication User Guide for more information on how to manage MFA settings.

This section explains how to set up the third-party authenticator method.

  1. If not already done, download and install the desired third-party authenticator app from App Store or Google Play on your device.

    Note: The following third-party apps have been tested and validated: Google Authenticator, Microsoft Authenticator, and Duo.

  2. Select the Set Up button next to Third-Party Authenticator.
  3. Edit the Device Nickname if desired, then select Continue.

    Note: The Device Nickname can contain numbers, letters, and the following special characters: space ( ), asterisk (*), hyphen (-), underscore (_), and apostrophe (‘). The maximum length is 30 characters.

  4. Scan the QR code using the third-party authenticator app, then select Continue.
  5. Enter the 6-digit code from the third-party authenticator app, then select Verify.

    Note: If the code was expired, enter the new code from the third-party authenticator app.

  6. Once successfully registered, you have the option to Continue to Application, Set up more verification methods, or Manage MFA settings.

    Notes:

    If you want to set this method as the preferred verification method, select the Set as preferred verification method checkbox. The Set up more verification methods option will become unavailable. If you want to set up more verification methods, select Manage MFA settings.

    Refer to Manage Multifactor Authentication User Guide for more information on how to manage MFA settings.

This section explains how to set up the text message method.

  1. Select the Set Up button next to Text Message.
  2. Select Country from the drop-down list, enter the Mobile Phone Number, edit the Device Nickname if desired, then select Continue.

    Notes:

    The Mobile Phone Number must be a valid phone number for the Country selected. This field can only contain numbers.

    The Device Nickname can only contain numbers, letters, and the following special characters: space ( ), asterisk (*), hyphen (-), underscore (_), and apostrophe (‘). The maximum length is 30 characters.

  3. Enter the 6-digit code sent in an SMS text message to the mobile phone number entered in Step 2, then select Verify.

    Note: The code is only valid for 15 minutes. If the code was expired, select Resend Code to receive new code

  4. Once successfully registered, you have the option to Continue to Application, Set up more verification methods, or Manage MFA settings.

    Notes:

    If you want to set this method as the preferred verification method, select the Set as preferred verification method checkbox. The Set up more verification methods option will become unavailable. If you want to set up more verification methods, select Manage MFA settings.

    Refer to Manage Multifactor Authentication User Guide for more information on how to manage MFA settings.

This section explains how to set up the automated phone call method.

  1. Select the Set Up button next to Automated Phone Call.
  2. Select Country from the drop-down list, enter the Phone Number, edit the Device Nickname if desired, then select Continue.

    Notes:

    The Phone Number must be a valid phone number for the Country selected. This field can only contain numbers.

    The Device Nickname can only contain numbers, letters, and the following special characters: space ( ), asterisk (*), hyphen (-), underscore (_), and apostrophe (‘). The maximum length is 30 characters.

  3. Enter the 6-digit code sent in an automated phone call to the phone number entered in Step 2, then select Verify.

    Note: The code is only valid for 15 minutes. If the code was expired, select Resend Code to receive new code

  4. Once successfully registered, you have the option to Continue to Application, Set up more verification methods, or Manage MFA settings.

    Notes:

    If you want to set this method as the preferred verification method, select the Set as preferred verification method checkbox. The Set up more verification methods option will become unavailable. If you want to set up more verification methods, select Manage MFA settings.

    Refer to Manage Multifactor Authentication User Guide for more information on how to manage MFA settings.

This section explains how to set up the email method.

  1. Select the Set Up button next to Email.
  2. Enter the 6-digit code sent to the email address registered with Fannie Mae, then select Verify.

    Note: The code is only valid for 15 minutes. If the code was expired, select Resend Code to receive new code

  3. Once successfully registered, you have the option to Continue to Application, Set up more verification methods, or Manage MFA settings.

    Notes:

    If you want to set this method as the preferred verification method, select the Set as preferred verification method checkbox. The Set up more verification methods option will become unavailable. If you want to set up more verification methods, select Manage MFA settings.

    Refer to Manage Multifactor Authentication User Guide for more information on how to manage MFA settings.