What is two-factor authentication?
Two-factor authentication adds an extra step when you log in:
Something you know: your email + password (or Google sign-in)
Something you have: a one-time code from your phone
Because ImpactGraph contains your financial data and the ability to approve or make payments, this extra step helps prevent unauthorized access even if someone gets your password.
Who manages 2FA?
Fiscal sponsors: control whether 2FA is required for accounts on their ImpactGraph workspace.
Projects / users: may be prompted to set up 2FA the next time they log in, depending on your sponsor’s settings.
If you’re not sure why you’re seeing a 2FA prompt, check with your fiscal sponsor or system admin.
Setting up 2FA for the first time
1. Sign in to ImpactGraph
Go to your usual ImpactGraph login page.
Enter your email.
Log in using:
Your password, or
Sign in with Google (if that’s how your account is configured).
After your credentials are accepted, you’ll see a screen asking you to add another authentication method.
2. Choose how you want to receive your code
You’ll see two options:
SMS – we text a 6-digit code to your phone number.
Authenticator app (recommended) – use an app like Google Authenticator to generate a 6-digit code that refreshes every ~30 seconds.
💡 Tip: SMS is simpler and works well for most people. Authenticator apps are generally considered more secure, which is why we recommend them if you’re comfortable installing an app.
Option A: Set up 2FA with Google Authenticator (or another app)
Download an authenticator app
On your phone, go to the App Store or Google Play Store.
Install Google Authenticator (or another compatible authenticator app).
Open the app and add a new account
Open the authenticator app on your phone.
Choose “Add account” or “Scan QR code” (wording may vary by app).
Scan the QR code in ImpactGraph
On your computer, you’ll see a QR code in ImpactGraph.
Use your phone to scan the QR code displayed on your ImpactGraph screen.
Confirm the code
After scanning, your app will create a new entry for ImpactGraph.
You’ll see a 6-digit code that changes every ~30 seconds.
Enter that 6-digit code back into ImpactGraph to confirm.
Once confirmed, 2FA with your authenticator app is active.
Option B: Set up 2FA with SMS
Select SMS as your 2FA method.
Enter your mobile phone number.
We’ll send you a 6-digit code via text message.
Enter that code back into ImpactGraph to confirm.
Once confirmed, 2FA via SMS is active.
What happens next time I log in?
After setup:
Log in to ImpactGraph with your email + password (or Sign in with Google).
You’ll be prompted to enter a 6-digit code:
If you chose SMS, you’ll receive a text message with the code.
If you chose an authenticator app, open the app and use the current code for ImpactGraph.
Enter the code and you’ll be logged in as normal.
Troubleshooting & FAQs
Q: I don’t see the 2FA setup screen.
A: Your fiscal sponsor or admin may not have enabled 2FA yet. Check with them if you believe you should have access.
Q: Can I change from SMS to an authenticator app (or vice-versa)?
A: Yes, in most cases you can switch methods from your account security settings once your admin has enabled that option. If you don’t see this, contact your fiscal sponsor or ImpactGraph support.
Q: What if I lose my phone or can’t access my codes?
A: Reach out to your fiscal sponsor admin or [email protected] so we can help you securely regain access.