Two-Step Verification Enabled by Default for a Safer Experience

To enhance your account protection, OneTrust has enabled Two-Step Verification (also known as Two-Factor Authentication or 2FA) for all users accessing the OneTrust platform using an email address and password. 2FA adds an extra layer of security by requiring a second verification step when logging in, ensuring that only you can access your account—even if your password is compromised.

What to Expect

  • The next time you log in, you will be prompted to enter a One-Time Password (OTP) which will be sent to your registered email.

  • You will need your password and a OTP to log into the OneTrust platform.

For more information on how 2FA works, see Configuring Two-Step Verification. Thank you for trusting us to keep your data secure!

Frequently Asked Questions (FAQ)

To what email address will the verification code be sent?

A verification code will be sent to the email address identified within the Email Address field of the user's profile in the OneTrust platform. This is the email address with which a user logs in to the OneTrust platform.

If some of my employees do not have valid email addresses associated with their account, will we be able to turn on 2FA?

No - users without valid email addresses are not eligible for the 2FA feature. While OneTrust strongly recommends keeping this feature turned on to protect your organization’s sensitive information, in absence of valid email addresses, 2FA can be turned off by a Site Admin within the root organization. For more information, see the To enable / disable Two-Step Verification procedure.

Can the 2FA verification code be sent via SMS or phone call, or via authentication app?

No - 2FA verification codes can only be sent via email.

Does 2FA affect the myOneTrust login as well?

No - 2FA only applies to users logging into the OneTrust platform.

Some of my employees log in via Single Sign-On (SSO), but others use an email address and password to log in. Will all of them have to use a 2FA verification code to log in?

Only users who log in with an email address and password will receive the 2FA verification code when this functionality is enabled in your OneTrust account. Users who log in via SSO will not be affected by this feature.

Some of my employees are multi-tenant users (i.e. users that belong to multiple OneTrust accounts/tenants). What happens if 2FA is disabled in one account that they belong to but remains enabled on other accounts?

Users will continue to be prompted to enter a 2FA verification code unless 2FA is disabled across all accounts to which the user belongs.