In PassportScan, users can enable MFA (Multi-Factor Authentication) to enhance the security of their account. The deactivation of MFA follows a controlled procedure to ensure system security.

1. Backup codes when enabling MFA

When enabling MFA via Clerk, the system provides backup codes:

• They must be stored securely by the user enabling MFA.

• They allow the user to recover access and disable MFA if the authenticator is lost.

• If the backup codes are kept, the user can manage MFA deactivation independently.

2. Requests to disable MFA without backup codes

If the user does not have access to the authenticator or backup codes, MFA cannot be disabled automatically. A formal process is required:

1. The request must be sent from the email address of the user whose MFA needs to be disabled.

2. The email must include:

   • Full name of the user

   • Email address of the affected account

   • Reason for the request

3. The request should be sent to: security@passportscan.net

⚠️ Important: Requests from third parties to disable MFA for another user will not be accepted. This protects critical access and prevents security risks.

3. Recommendations

• Always store backup codes securely when enabling MFA.

• Use the backup codes to regain access before requesting assistance.

• Follow the formal email process only if backup codes are unavailable.

This policy ensures that users who choose to enable MFA can do so safely and know how to recover access if they lose their authenticator.