Skip to main content

Multi-factor authentication (MFA)

  • Updated

In this guide you will learn what multi-factor authentication (MFA), also called two-factor authentication (2FA), means for your Leanheat® Monitor login, how to set it up and what to do if you lose your phone.

What is changing

From 8 December 2026, MFA is mandatory for all Leanheat® Monitor users, in the web app and in the mobile app. You still log in with your Danfoss Profile email and password. After that, you confirm with your mobile device that it is really you.

MFA protects your account even if someone gets hold of your password. Without the second step, they cannot log in.

You set up MFA only once per Danfoss Profile. The same method then works for every Danfoss application that requires MFA.

What you need

A mobile phone with the verification app you choose, or a mobile number that can receive SMS.

Choose your verification method

  • Auth0 Guardian app (recommended): you get a push notification on your phone and simply tap Approve. This is the easiest option.
  • Authenticator app: you enter a 6-digit code from Microsoft Authenticator, Google Authenticator or another one-time password (OTP) app. A good choice if you already use one.
  • SMS: you receive a 6-digit code by text message. This is the least secure option. Use it only if you do not have a smartphone.

Set up MFA

The first time you log in after MFA is switched on, you are guided through the setup:

  1. Log in to Leanheat® Monitor with your Danfoss Profile email and password, as usual.
  2. The page Setup MFA for enhanced security opens. Choose your method: download the Guardian app and press Continue, or select SMS or OTP Authenticator at the bottom.

Setup MFA for enhanced security

  1. Complete the steps for your method:
    • Guardian app: scan the QR code with the Guardian app, then approve the notification on your phone.
    • Authenticator app: scan the QR code with your authenticator app, enter the code it shows in One-time code and select Continue.
    • SMS: select your country code, enter your mobile number, then enter the code you receive by SMS.

Scan code via OTP app

  1. Save your recovery code. Copy or download it and store it in a safe place, then tick I have saved the code in a safe place and select Continue.
  2. You continue to Leanheat® Monitor.

Save your recovery code

Logging in after the setup

You will not be asked for verification every time. Your very first login always counts as a new device, so you verify then. After that, on a device you use regularly, you are usually not asked again. Verification is requested when extra security is needed, for example when you log in from a new device, from an unusual location or from an unsafe network.

When you are asked to verify:

  • Guardian app: tap Approve in the notification, or open the Guardian app and approve the login there. If you do not respond, after a short time you can resend the notification, enter the code manually or use your recovery code.
  • Authenticator app: open the app, find your Danfoss Profile entry and enter the code it shows.
  • SMS: enter the code you received by SMS.

Keep your recovery code safe

The recovery code is your emergency access if your phone, app or mobile number is not available. Store it where you can find it, and never share it with anyone. Each recovery code works only once: after you use it, you get a new one, which you need to save again.

If you lose your phone or change your number

  1. Use your recovery code. On the verification screen, select Use the recovery code, enter it and select Submit. Save the new recovery code you get afterwards.

Enter the recovery code

  1. Request a new recovery code. If you cannot find your recovery code, open My Danfoss, go to the Multi-factor authentication tab and select Send a new code under New recovery code. The code is sent to your email. You can open My Danfoss without MFA.
  2. Contact us. If neither option works, contact your local Danfoss representative. Your identity has to be verified before your MFA can be reset.

Change your MFA method

To switch to another method, for example from SMS to the Guardian app, or to move MFA to a new phone:

  1. Open https://my.danfoss.com/multifactor-settings. Or, in My Danfoss, select your profile initials in the top right corner and open Password and privacy.
  2. Open the Multi-factor authentication tab.
  3. Under Reset MFA, select Start MFA reset and confirm with your current method.
  4. At your next login, set up your new method.

MFA stays switched on. A reset only changes the method you use.

Multi-factor authentication tab in My Danfoss

One login per person

MFA is designed for individual users. If several people share one login, it causes problems:

  • One person's phone has to approve every login, for everyone.
  • The others cannot log in when that person is not available.
  • The recovery code gets passed around.
  • You can no longer tell who made a change.

Before 8 December 2026, make sure everyone has their own login. An admin can add users and give each of them access to the right devices, see User management.

Need help?

If you have questions about MFA or cannot log in, contact your local Danfoss representative.

Related articles