Adaptive Multi-Factor Authentication

What you'll learn:

How adaptive MFA protects your Knack account
What triggers an MFA prompt on Dashboard login
How to complete email-based verification
Why subsequent logins from the same IP are seamless
Special considerations for shared builder accounts

Overview

Adaptive Multi-Factor Authentication (MFA) adds a smart security layer to your Dashboard login. Rather than requiring authentication on every login, Knack's adaptive approach only prompts you when signing in from an unfamiliar IP address. Once you verify from that location, future logins from the same IP skip MFA entirely—keeping your workflow uninterrupted while your account stays secure.

This means you get enterprise-grade security without the friction of managing authentication codes or apps on every single login.

How Adaptive MFA Works

When MFA Triggers

Adaptive MFA activates on your first login from a new IP address when using email and password authentication to log into the Dashboard. Here's what qualifies as "new":

You're logging in from a different geographic location
You're using a different network or internet connection
Your ISP has assigned you a new IP address
You're logging in from a device or network Knack hasn't seen before with your account

Once your account recognizes that IP address as verified, you won't see an MFA prompt from that location again—even if you log out and log back in later.

Note: If you log in from the same IP address using a different browser or incognito window, you won't trigger MFA again. Knack recognizes the IP, not the browser.

What Happens When MFA Prompts

When MFA is triggered:

You see a verification screen after entering your email and password
An MFA link arrives in your email inbox within seconds
You click the link to complete authentication
You're automatically logged into the Dashboard—no additional codes or steps required
That IP address is now verified for future logins

The entire process takes about 30 seconds and requires only one click in your email.

Subsequent Logins from Familiar Locations

After verification, logging in from the same IP address is frictionless:

No MFA prompt appears
You log in with your email and password as usual
You have immediate access to your Dashboard

This seamless experience continues indefinitely for that IP address—until you log in from a different location, which restarts the adaptive process.

Login Scenarios

Scenario 1: Office Network (Regular Location)

You log in to the Dashboard from your office every day.

First login from office IP: Adaptive MFA triggers → verify via email → logged in
Subsequent logins from office: No MFA → immediate access
Result: One-time verification, then seamless daily logins

Scenario 2: New Location (Travel or Remote Work)

You travel or work from a client site with a different internet connection.

First login from new location: Adaptive MFA triggers → verify via email → logged in
Logins from that new location: No MFA → immediate access
Returning to office: No MFA → immediate access (office IP already verified)
Result: Quick verification at each new location, then frictionless access

Scenario 3: Mobile Access

You log in to the Dashboard from your phone using a cellular network.

First login on cellular network: Adaptive MFA may trigger (depending on your carrier's IP stability)
Subsequent logins on same network: Likely no MFA (if carrier assigns consistent IPs)
Switching to public WiFi: MFA may trigger (new IP address)
Returning to cellular: No MFA (already verified)

Email Verification Process

Finding Your MFA Email

When MFA is triggered, check your inbox for an email from Knack with the subject line: "Complete your Knack Dashboard login"

If you don't see it:

Check your spam/junk folder — verification emails sometimes get filtered
Wait a few seconds — emails occasionally take 5-10 seconds to arrive
Check the email address on file — make sure you're checking the correct inbox for your Knack account
Request a new link — if you don't receive it within 2 minutes, the Dashboard login screen will let you request another

Completing Verification

Open the email from Knack
Click the "Verify and Log In" button or link
You'll be taken to the Dashboard and automatically logged in
That IP address is now registered with your account

Tip: The verification link expires after 15 minutes for security. If it expires, just start the login process again—a new link will be sent immediately.

Special Considerations

Shared Builder Accounts

If your app has shared builder accounts:

All shared users will see the MFA prompt on their next login after May 27 2026—even if the account has been used before
After verification, logins from that IP are frictionless for that shared builder
Different IP addresses trigger MFA again (expected behavior for security)

Best Practice: If you are a shared builder, consider signing in via Google SSO or adding 2FA to your log in

Google SSO (Single Sign-On) Accounts

Adaptive MFA does not apply to accounts using Google SSO for authentication.

If you log in via "Sign in with Google," you bypass Knack's MFA entirely
Google handles authentication on their side
This is expected and secure—you're relying on Google's security instead

Troubleshooting

I'm Not Receiving the MFA Email

Check your spam folder first. Verification emails sometimes get caught by filters.

If you still don't see it:

Confirm your email address — Make sure the email you're using to log in is correct and active
Check for typos — Double-check your email address during login
Request a new link — The Dashboard login screen will let you request another verification email
Wait a moment — Emails occasionally take up to 30 seconds to arrive
Check your email provider's spam settings — Some providers block emails from unfamiliar senders

If you've tried these steps and still aren't receiving emails, contact Knack Support with your account email address.

The Verification Link Isn't Working

The link has expired — Verification links are valid for 15 minutes. Request a new link and try again
You're using an old link — If you requested multiple links, use the most recent one
Browser issues — Try a different browser or incognito window

I'm Being Prompted for MFA Too Frequently

If you're being asked to verify from the same location repeatedly:

Your IP address is changing — Some networks (like certain mobile carriers or corporate VPNs) assign new IPs frequently. This is normal and expected behavior
You're using a VPN or proxy — These services change your IP address. If you regularly use a VPN, you may need to verify each time the service assigns a new IP
Public WiFi networks — Public networks often have dynamic IPs. Verification is normal from these locations
- This behavior is actually a security feature—it prevents account access from unexpected locations even if someone has your password.

Summary

Adaptive MFA enhances your Knack security without slowing you down. Once you verify from a location, you enjoy seamless logins from that IP address. For shared builder accounts, plan for an initial verification round, then experience the same frictionless experience.