Skip to main content

About Multi-Factor Authentication (MFA)

Learn what MFA is and why it's important to keep your online data safe.

Updated over 3 weeks ago

At RLI, your account security is a top priority. To better protect your information, we require all users to enable Multi-factor Authentication (MFA) on their accounts. 

Multi-Factor Authentication (MFA) is an extra layer of security that helps keep your RLI account safer, even if your password is compromised. MFA is a security feature that confirms your identity before giving access to your account. Instead of only entering your password, MFA occasionally requires an additional step to prove that it’s really you.

How does it work?

MFA works by requiring you to periodically verify your identity in two ways when you sign in to an account. Here's how it usually goes:

Step 1: Enter your password - This is the first layer, something you know.

Step 2: Prove it’s really you - You’ll be asked for a unique code:

  • Sent to your phone via text; or

  • Sent to your email address

Why it matters

Even if someone guesses or steals your password, they won’t be able to sign in without the second factor. This helps protect your account from unauthorized access, even if your password is compromised.

Enabling MFA takes less than a minute  

Enabling MFA takes less than a minute! Over the next few months, you will be prompted at sign-in to: 

  • Change your password

  • Update your account details

Password requirements:  

Your new password must include at least 15 characters and include at least 3 of the following:

  • Lowercase letters

  • Uppercase letteres

  • Numbers

  • Special characters

Important note  about sharing email addresses

Your email address serves as your RLI username. For security purposes, we require individual email addresses and prohibit shared inbox email addresses for user accounts. If you need to change your email or add new accounts for the RLI Producer Portal, please contact your producer system administrator.

Do I have to use MFA?

Yes, we require Multi-Factor Authentication (MFA) on all online accounts at RLI. MFA adds an extra layer of protection to your account, even if your password is compromised. It helps prevent unauthorized access from hackers and safeguards sensitive information. Plus, many state departments of insurance now require MFA when accessing insurance company online systems.

Our team uses a shared email account or a shared inbox. Is that okay?

With this change, you’ll need to set up individual accounts for each person in your company who needs to sign in to RLI’s producer portal. Contact your producer administrator to add new RLI accounts.

What can I use to verify it’s me?

  • Something you know: your username and password

  • Something you have access to: your email address or mobile phone number

How do I enroll in MFA on my account?

It’s easy to set up MFA with RLI. When it’s time for you to enroll, you’ll see an invitation to reset your password on the sign-in screen. Simply update your password and your contact information, and we’ll send you a unique one-time code to verify your identity. Once that’s done, you’re set up! It’s that easy.

Can I disable MFA after enabling it?

MFA is required by RLI for all users to keep your account and online data safe. However, you will not be prompted to get a code every time you sign in.

Will I need to get a unique code every time I sign in?

No. You’ll be prompted to verify using MFA:

  • When signing in from a new device or location

  • After a password change

  • Periodically, for added security

Is MFA required for every account user?

Yes.

What if my MFA code isn't working?

Try the following:

  • Wait a few seconds and try again

  • Request a new code

  • Contact your producer administrator if problems persist

Are there any additional costs associated with MFA?

In most cases, there are no costs to you. However, text/SMS or phone call charges may apply depending on your mobile plan.

What should I do if I no longer have access to the email associated with my account?

No worries, this can be fixed. Simply contact your administrator. For security reasons, we may ask you to verify your identity before updating your email address or granting access to your account.

Why am I being asked for a verification code when signing in?

This is part of our Multi-Factor Authentication (MFA) system. It adds an extra layer of security by requiring a code sent to your phone or email after entering your password.

All other inquiries

If you need assistance to complete your MFA enrollment to access your online account and conduct business with RLI, contact your administrator.

Did this answer your question?