Your CIFAS case involves sensitive personal information. The Client Portal uses multiple layers of security to protect your account and your data.
Two-factor authentication (2FA)
2FA is mandatory for all Client Portal accounts and cannot be disabled. After entering your User ID and password, a 6-digit code is emailed to the email address on your account. Each code works once and only for 10 minutes. Even if your password is compromised, nobody can access your account without this code.
See Two-factor authentication for full details.
Apple and Google log in
You can connect Apple or Google to your account and log in with 'Log in with Apple' or 'Log in with Google' instead of your User ID and password. Apple or Google confirms it's you, sharing only the details needed to do so, and no emailed code is needed.
To set it up:
- On mobile and tablets: Tap the menu icon at the top left, tap your name, then tap 'Manage account'
- On desktop: Select your name at the top of the left-hand menu, then select 'Manage account'
- On the 'Account' tab, find 'Easy Log In' and choose 'Apple Log In' or 'Google Log In'
See Logging in with Apple or Google for full details.
Your devices
Each time you log in, the device and browser you used are recorded against your account. You can see them on the 'Devices' tab in 'Manage account'. If you see a device you don't recognise, press 'Log out all devices' to sign out everywhere except the device you're using.
See Managing devices for full details.
Geo-restrictions
Access to the Client Portal is restricted to the United Kingdom. This prevents hackers from accessing the portal or client accounts from unusual or high-risk regions, reducing the risk of fraud.
If you're travelling and need access, contact us at [email protected] to request a secure exception.
IP restrictions
The portal automatically blocks access from:
- VPNs (Virtual Private Networks)
- Proxy servers (both public and private)
- Data centre IPs (including OVH, DigitalOcean, AWS, and Google Cloud)
- Anonymising services and masking tools
If you're blocked, reconnect through a standard UK home or mobile internet connection to restore access.
If you encounter a white screen or content fails to load, it may be because your connection is being routed through a restricted IP. Switch to a standard internet connection and try again.
We will never ask for your portal login details, your verification codes, bank details, or full passwords by email, phone, or any other channel. If someone claiming to be from ADVICIFAS asks for this information, do not provide it and report it to us immediately.
