We’ve improved our two-factor authentication (2FA) to support Time-Based One-Time Passwords (TOTP), allowing users to secure their accounts with any authenticator app (like Google Authenticator, Microsoft Authenticator, or Authy). This enterprise-grade security method generates temporary codes that refresh every 30 seconds, eliminating reliance on emails and reducing phishing risks.

By navigating to Profile > Password & Security, both Users and Admins can easily set up 2FA by scanning a QR code or entering a manual key, They will receive a one-time recovery code during setup, ensuring access even if their device is unavailable.

• Stronger protection against phishing and unauthorized access
• Complies with financial/healthcare data regulations

• Simple setup with any preferred authenticator app
• Backup codes prevent lockouts

We’re introducing a centralized Activity Log that gives admins complete oversight of critical actions across your platform. Every important event—including program updates, campaign creations, training assignments, and mandatory content changes—is now automatically recorded with precise timestamps in your company’s timezone.

Key Features:
• Comprehensive Tracking – Logs all admin actions and system changes in one place
• Smart Filtering – Search by company, admin, date range, or event type
• Export Capability – Download full logs for audits or reporting
• Timezone-Aware – All timestamps reflect your company’s local time

The Activity Log is available from the MSP and Company Portal. Just click Activity from the App Sidebar to get started.

Admins can now manually revalidate user email addresses, especially useful for accounts marked as "Undeliverable." This action triggers the same validation checks as when adding new users to the roster and updates the status to "Active" (if successful) or retains "Undeliverable" (if delivery fails).

Key details:
✅ Single or bulk revalidation – Recheck emails for individual users or groups at once.
✅ Consistent checks – Uses the same reliable validation process as new user signups.
✅ Instant status updates – See results immediately in the user roster.
⌛️ 24-hour cooldown – To prevent overuse, each user can only be revalidated once every 24 hours.

We’ve significantly improved bulk management capabilities across the platform, enabling admins to process high-volume tasks more efficiently than ever. You can now remove multiple users simultaneously, update phishing alert categories in batches, and manage events in bulk. These upgrades feature faster processing (especially for datasets of 500+ items), clearer progress tracking, and smarter error handling that isolates issues without failing entire batches.