MFA

Multi-Factor Authentication (MFA) is a security process that requires users to provide two or more verification factors to gain access to a service or system. Instead of relying solely on a password, MFA combines something you know (like a password), something you have (such as a phone or security token), or something you are (like a fingerprint or facial recognition). This layered approach significantly reduces the risk of unauthorised access, especially in cases where passwords are compromised. By requiring multiple forms of identification, MFA helps protect sensitive data and systems from cyber threats, making it a vital component of modern digital security.

MFA Enabled

MFA is a mandatory requirement for access to Baltic Exchange services. You will be asked to select your preferred option either the first time you login or if you have your MFA option reset.

Baltic Exchange supports two MFA options for our customer-facing apps:

Authenticator MFA - Requires a separate Authenticator app, it may show as “Google Authenticator or similar”

SMS MFA - Requires a mobile number

The following support documentation will help you set up and manage the different MFA options available to you.

Step-by-Step Guide to MFA Options

When you first log in or your MFA options are reset, you will be presented with two options.

Baltic Exchange recommend Authenticator MFA but both options are secure and reliable.

Please note: Once you select your MFA method (SMS or authenticator app), you will continue using that method going forward. You will not be prompted to choose again unless the Baltic Exchange resets your MFA setup.

Authenticator MFA - Download an Authenticator App to your mobile

The choice of authenticator app is your own preference. However, if you do not already use an authenticator app, we recommend using one of the following:

App

Download

How to Use

Google Authenticator

iOS · Android

Instructions

Microsoft Authenticator

iOS · Android

Instructions

Authy

iOS · Android · Desktop

Instructions

iPhone Built in Password Manager (since iOS 15)

N/A

Instructions

1. Sign in the Baltic App with your username and password.

2. You will be taken straight to the MFA set-up page.

3. Select “Authenticator App”, it may be presented as “Google Authenticator or similar”.

4. Open the Authenticator app that you downloaded to your mobile device.

5. Scan the QR code shown on the Baltic App with the Authenticator App, see the Instructions links for info on how to use one of the common authenticator apps.

6. Type the six-digit code from the app and choose Verify.

7. Done. Each time you log in you will be asked for a new code. Simply open your Authenticator App and enter the code displayed. Note: The code is displayed and refreshed every 30 seconds.

SMS MFA - Enrolment

Users also have the option to set up SMS MFA, this will send you a text message to your mobile number when you need to validate your login.

1. Sign into the Baltic App with your username and password.

2. You will be taken straight to the MFA set-up page.

3. Select “SMS”.

4. Select your country code and enter your mobile number and press “Continue”.

5. Open the SMS message sent to your mobile number.

6. Enter the verification code into the Baltic App and press “Continue”.

Please note: 

In most cases, the SMS will appear from the sender ID “Baltic” or “Twilio Verify” with the message: 

“Your Baltic Exchange verification code is: XXXXXX”

In some countries, due to local telecom restrictions, the message may come from a generic phone number, it may be translated into the local language and the wording may differ, but it will always contain a 6-digit code.

Baltic staff will NEVER ask for your verification code. Do not share it with anyone.

Verification codes are only sent when you initiate an action that requires them - they should not appear unexpectedly. 

  • If you experience any issues receiving SMS codes, please contact our Support Team.

  • The Baltic will never share a link via SMS, if you receive a SMS from the Baltic with a link please contact Baltic support.

MFA - Frequently Asked Questions

I need to reset my MFA

Email: support@balticexchange.com with a subject line of "Reset My MFA"

Once you receive confirmation your password has been reset, you should then:

1.  Delete baltic-exchange from your existing Authenticator App

2.  Login to My Baltic

3.  Rescan the NEW QR Code

4.  Enter the Authenticator passcode

My Authenticator code is not accepted – what should I do?

Make sure the date and time on your phone are set automatically.

If the problem continues, generate a new code and try again.

I cannot scan the Authenticator QR code – is there another way?

On the set-up page select “Trouble Scanning?” A key will appear.

Enter that key manually in your authenticator app.

What if I lose or replace my mobile?

Contact Baltic Support via support@balticexchange.com . After we confirm your identity we will reset MFA so you can enroll a new device.

I have not received my SMS code

SMS is not guaranteed to be delivered, if you have not received an SMS code after two attempts please contact Baltic Support via  support@balticexchange.com with a subject line of "Reset My MFA".

Baltic Support will reset your MFA with 24hrs and send you a confirmation. You should then try again using the Authenticator MFA option.

The SMS message says Likely-SPAM

Our SMS provider does its best to comply with the regulations in all locations but some countries will mark valid SMSs as Likely-SPAM.

If you have requested an SMS MFA code from a Baltic site and one with Likely-SPAM arrives within a 30 seconds then it is likely to be legitimate.

Please note the Baltic will never put links into SMS messages, if you are prompted to click on a link please ignore the SMS and contact the Baltic at support@balticexchange.com with the subject “SMS Phishing” and any relevant information so that we can investigate.

The SMS message does not mention Baltic Exchange

Our SMS provider does its best to comply with the regulations in all locations but some countries will alter valid SMSs and remove references to companies.

If you have requested an SMS MFA code from a Baltic site and a code arrives within a 30 seconds then it is likely to be legitimate.

Please note the Baltic will never put links into SMS messages, if you are prompted to click on a link please ignore the SMS and contact Baltic Support via support@balticexchange.com with the subject “SMS Phishing” and provide any relevant information so that we can investigate.

Still need help?

Email : support@balticexchange.com if you require addtional assistance.