You're a staff member or owner and the admin portal won't let you continue until you set up multi-factor authentication (MFA). This is expected — MFA is required for staff and owner accounts, not optional. Completing it once gets you through.
What's happening
Staff and owner accounts protect member data, so the platform requires a second factor on every sign-in. An account counts as MFA-protected in either of two ways: an authenticator app (TOTP), or a passkey. Either one satisfies the requirement. You manage both under Settings → Profile, in the Security section.
How to fix it
- Go to Settings → Profile and find the Security section. Look at Multi-factor authentication — if it shows Disabled, you need to enrol.
- Option A — authenticator app: press Enable MFA. Scan the QR code with an authenticator app (Google Authenticator, Authy, Microsoft Authenticator, or 1Password), then enter the 6-digit code the app shows to verify.
- Save your backup codes when they're displayed. Store them somewhere safe — they let you sign in if you lose your phone. You won't be shown them again.
- Option B — passkey: in the Passkeys row press to add a passkey and follow your device prompt (Touch ID, Face ID, Windows Hello, or a security key). A registered passkey also satisfies the MFA requirement, so you don't separately need the authenticator app.
- Once Multi-factor authentication shows Enabled, you're done. On future sign-ins you'll be asked for your authenticator code or passkey.
You cannot skip this step for a staff or owner account. If you don't have access to Settings → Profile at all, or enrolment fails repeatedly, ask the gym owner or whoever manages staff to confirm your account and role — see the staff management guide.