Below are answers to the most common Multi-Factor Authentication (MFA) questions. For setup instructions, see Setting Up and Managing Multi-Factor Authentication. For general troubleshooting, see Troubleshooting Multi-Factor Authentication (MFA).
I'm not receiving my MFA code — what do I do?
If your MFA code isn't arriving, try the following steps in order:
Click the Resend code link on the login screen to send a new code.
Check your spam or junk folder if you're using email as your MFA method.
Confirm the phone number or email address on file is correct. If it's wrong, log in using a backup MFA method and update your contact information under Settings > Manage Login Info > Manage MFA.
If you use a mobile authenticator app, make sure your device's time is synced correctly — TOTP codes are time-sensitive.
If none of the above works, try switching to a different MFA method (phone, email, or authenticator app) from the login screen.
Note: MFA codes sent by text or email expire after 15 minutes. Authenticator app codes cycle continuously.
How do I update or change my MFA methods?
You can manage your MFA methods at any time from within your account:
Go to Settings > Manage Login Info > Manage MFA.
To add a new method, click + Add MFA Factor, select the type, and follow the prompts to verify it.
To remove a method, you must have at least two active MFA methods on file. Add a new method first if you only have two.
Important: Patriot requires a minimum of two active MFA methods at all times. You cannot remove a method if it would leave you with fewer than two.
I no longer have access to my MFA phone number or email — how do I log in?
If you can't access one of your MFA methods:
On the login screen, select Use a different method to switch to your other MFA method.
Once logged in, go to Settings > Manage Login Info > Manage MFA to update the method you've lost access to.
Add a replacement method before removing the inaccessible one.
If you can't access any of your MFA methods, see the section below on recovering your account when all MFA methods are lost.
I've lost access to ALL my MFA methods — how do I recover my account?
If you've lost access to every MFA method on your account, you'll need to verify your identity before we can reset your access. This process takes 24–48 business hours.
Email [email protected] and include all of the following in your message:
A copy of your government-issued photo ID
Proof of business ownership or authorization
Your Patriot Software account email address (the one used to log in)
Our team will verify your identity and help restore access to your account.
MFA keeps asking for a code on my device even though I selected 'Remember this device for 90 days' — why?
The 90-day device memory relies on a browser cookie. It can be cleared by:
Clearing your browser's cache or cookies
Using a different browser or an incognito/private window
A browser or operating system update
Switching devices or browsers since the last login
To avoid this, use the same browser and device each time, and avoid clearing cookies if possible. Do not use the Remember this device option on a shared or public computer.
I forgot my password and can't receive the reset email — what should I do?
Follow these steps to reset your password:
On the login page, click Forgot Password.
Enter the email address associated with your Patriot account.
Check your spam or junk folder if the reset email doesn't appear within a few minutes.
Make sure you're checking the correct inbox — the reset email goes to your account email address, which may differ from your MFA email.
If you're still unable to receive the reset email or your account email is no longer accessible, contact Patriot Support for identity verification assistance.
My employee can't access the employee portal — how do I help them?
If an employee is having trouble accessing or setting up the employee portal:
From your employer account, resend the portal invitation to the employee.
Ask the employee to check their spam or junk folder for the invitation email.
Confirm the employee's email address in your records is correct before resending.
For MFA setup in the employee portal, see How to Set Up MFA in the Employee Portal.
Portal invitations can expire — if the employee's link has expired, resending will generate a fresh one.
I noticed unfamiliar login activity on my account — what should I do?
If you see suspicious or unauthorized login activity:
Change your Patriot account password immediately.
Review your active MFA methods under Settings > Manage Login Info > Manage MFA and remove any methods you don't recognize.
Contact Patriot Support if you believe your account has been compromised.
MFA is your primary defense against unauthorized access. Keeping your MFA methods up to date and using an authenticator app (rather than SMS) provides the strongest protection.