Step 1: Prerequisites

Before implementing Step-up MFA, ensure you have the basics set up.

What You Need

Step-up MFA is designed to add an extra security layer on top of existing authentication. You need:

1. Transcodes Project - Create one at app.transcodes.io 
2. User Authentication - Users must be logged in before triggering MFA

When to Use Step-up MFA

Step-up MFA is triggered after initial login, when users perform sensitive actions:

// User is already logged in
// Now they want to access admin panel
 
async function accessAdminPanel() {
  // Step 1: Check if user is authenticated
  const isAuth = await transcodes.token.isAuthenticated();
 
  if (!isAuth) {
    // Not logged in - redirect to login
    await transcodes.openAuthLoginModal();
    return;
  }
 
  // Step 2: Require MFA for admin access
  const mfaResult = await transcodes.openAuthMfaModal();
 
  if (mfaResult.success) {
    // MFA verified - show admin panel
    showAdminPanel();
  }
}

MFA vs Login

Supported MFA Methods

Users can set up one or more MFA methods:

• TOTP - Google Authenticator, Authy, 1Password
• Email OTP - 6-digit code sent via email
• Hardware Keys - YubiKey, FIDO2 security keys

What’s Next