Overview
Multi-factor authentication (MFA) adds an extra layer of security to your Descartes Pacejet account by requiring a verification code in addition to your password. This FAQ answers common questions about why MFA is required, how it works in Pacejet and what you need to do to get ready.
What Is Multi-Factor Authentication (MFA)?
MFA is a security process that requires two forms of verification to log in. In Pacejet, this includes your password and a one-time code sent to your email. This helps protect your account from unauthorized access.
Why is Descartes Pacejet adding multi-factor authentication (MFA)
22% of all data breaches start with stolen credentials (Verizon 2025 DBIR). MFA stops attackers from logging in even if they have your password — protecting your shipping data and carrier accounts.
Source: https://www.verizon.com/business/resources/reports/dbir/
How effective is MFA?
Microsoft research shows MFA blocks over 99% of account compromise attacks. Google found it stops 100% of automated bots and 96% of phishing attempts.
Sources:
Is There Documentation on How to Activate MFA?
Yes. See the knowledge base article Enabling Multifactor Authentication for detailed steps.
Why text and email codes instead of an app?
Any MFA blocks the vast majority of attacks. Starting with text and email lets us protect every Pacejet user right away — no extra apps or setup required.
Why Is MFA Required?
MFA is required to improve account security and align with updated Descartes security standards. It reduces the risk of unauthorized access and protects your shipping and account data.
Who Is Affected?
MFA applies to all Descartes Pacejet users, including administrators and standard users who sign in to the application.
How Often Is MFA Required for Login?
Pacejet requires Multi-Factor Authentication, MFA, as part of the Pacejet login process. In most cases, users do not need to enter an MFA code every time they run a workflow from their Enterprise Resource Planning system. Once a user signs in successfully, Pacejet keeps that session active until the user signs out or goes about two hours without activity.
When Does This Take Effect?
Automatic activation of MFA begins in April 2026. All accounts will be required to use MFA starting in May 2026, and logins without MFA will be blocked as enforcement is rolled out.
What Will Change in the Login Process?
After entering your username and password, you will be prompted to enter a verification code sent to your email. You need both your password and the verification code to complete your login.
Can I Activate MFA for My Users?
Yes. Account administrators can activate MFA for users from the Descartes Pacejet user interface. Go to Setup, then select User Administration to manage MFA settings for your users. You can begin enabling MFA for your users before automatic activation starts. For timing details, see section above: When Does This Take Effect?
Do I Need to Enable Anything?
Yes. You can begin activating MFA for your users today from the User Administration page. If you do not enable it yourself, MFA will be automatically turned on based on the schedule described in the When Does This Take Effect? section above. After that, all users must sign in with MFA.
What If I Do Not Receive My Verification Code?
First, check your spam or junk folder for the email that contains your verification code. If you still do not see the email, confirm that your email address is correct with your Pacejet administrator.
If the problem continues, contact Descartes Customer Support at servicedesk@descartes.com or call +1 (800) 419-8495 for help.
What If I Do Not Have Access to My Email?
You need access to your registered email to log in with MFA. If your email address has changed or you temporarily cannot access it, work with your Pacejet administrator to update your account details.
If you need additional assistance, contact Descartes Customer Support at servicedesk@descartes.com or call +1 (800) 419-8495.
Can I Use Text-Based MFA?
Yes. A release in April 2026 will introduce a text option for MFA. At that point, users can choose between email or text.
Can MFA Be Turned Off or Can I Opt-Out?
No. MFA is required for all Pacejet users and cannot be disabled for individual accounts.
How Long Are Verification Codes Valid?
Max of 24 Hours and single use. Codes can only be used one and will expire daily per operations management.
Is There a Way for Users to Enter Their Own Mobile Phone or Email?
Yes, users will be prompted to enter their information and select their preferred method automatically.
More information is available in the article Verifying Login with Email or Mobile Phone Methods
What's next?
Pacejet will move to the Descartes Multi-Domain Login Page, which adds authenticator apps and SSO — the stronger sign-in methods recommended by CISA.