Worksheet

MFA tier and recovery sheet

Admins, finance, office staff, field staff and customers each get one line on a single printed page, so a manager can see every role and its allowed method together. Columns show the allowed methods, the fallback, the number of spare keys or backup codes, and who approves a reset when the user cannot sign in. Below sits the lost phone routine. It lists the proof of identity required and a log entry for each reset, plus the signature of whoever approved the routine.

Name: ______________________   Business: ______________________   Date: ______________

Scroll the table sideways to see every column.

Cross out or rewrite any heading that does not fit your business. From the guide “SMS codes, authenticator apps or passkeys: choosing MFA for staff”, www.gullysystem.com/blog/sms-codes-authenticator-apps-or-passkeys-choosing-mfa-for-staff