Hero will ask for MFA periodically, and if a change in location or device is detected.
The secondary authentication factor can be one of the following:
Code from an Authenticator app (such as Google Authenticator)
Code sent via SMS
The Setup Guide can also be downloaded at the bottom of this page.
