Introducing Multi-Factor Authentication to the Wrap client portal

30 June 2026

To help keep your clients’ information secure, we’re introducing Multi Factor Authentication (MFA) to the Wrap client portal.

We’ll contact your clients directly about this change, with the rollout happening in stages over the coming weeks.

What is MFA?

MFA adds an extra layer of security to your clients’ Wrap client portal accounts.

It requires them to confirm their identity using two or more methods when they log in, helping reduce the risk of unauthorised access - even if their password is compromised.

What your clients can expect

Over the next few weeks, we’ll email your clients to let them know MFA has been enabled and what they need to do next. We’ll use the email address they registered with for the client portal.

When they next log in, they will:


  • be prompted to set up MFA

  • choose a verification method – One Time Passcode sent via email, the Okta Verify app, or Google Authenticator (Apps are available free on iOS and Android.)

  • use their chosen method each time they log in

It only takes a few minutes to set up, with step‑by‑step support available in our MFA setup guide

When will your clients be enabled for MFA?

We expect to complete the rollout over the next few weeks. Client portal accounts will be enabled in alphabetical order, based on your client’s surname. We’re currently starting with clients whose surnames begin with A. You can check this page for updates, and we’ll let you know when the rollout is complete.

To help you support your clients, we’ve updated the client portal help guide.