User settings

ENVIRONMENT: Datto Partner Portal

This article describes the User Settings page in the Datto Partner Portal. From this page, you can do the following:

  • Set up the Multifactor Authentication (mfa) app.
  • Change your personal information including your name, email and phone number.
  • View all user accounts to which you have access - an asterisk (*) indicates the account to which you are currently logged in.

mceclip0.png
Figure 1: The User Settings page

Refer to How do I set up an external authenticator app for Datto Partner Portal? for more information.

How to...

In the Datto Partner Portal, click your account name in the top right-hand corner of the page, then select User Settings from the drop-down menu.

2.png
Figure 2: The Datto Partner Portal

  1. In the Multifactor Authentication secion, click CONFIGURE.

    fig3.png
    Figure 3: The Multifactor Authentication section

  2. In the Multifactor Authentication dialog box, click Configure.

    Third Party Authenticator App: Lets you authenticate with the app of your choice

  3. Select your preferred authentication method, then click the Enable mfa button.

    mfa setup via a third-party authenticator app

  4. When you set up an external authenticator app for use with the Datto Partner Portal, the system will ask you to scan a QR code with your mobile device as part of the setup process. To reproduce this QR code, click the View QR code button in the Multifactor Authentication section on the User Settings page.

1. Click the Edit button on the User Information card.

mceclip0.png
Figure 4: The Edit User Information button

2. Update the user information, then click the Save button.

mceclip2.png
Figure 5: The Edit Personal Information dialog box

To change the password:

1. Click the Change Password link on the User Information card.

fig8.png
Figure 6: The User Information card

2. Enter the current password and the new password, then click the Change Password button.

figure9.png
Figure 7: The User Information card

The My Accounts section shows you an overview of all Partner Portal accounts for the logged-in user, including:

  • The account's role.
  • The application the account uses.
  • The last login for the account.

mceclip1.png
Figure 8: The My Accounts card

Account security and lockout policies

To protect your organization and prevent unauthorized access, the Datto Partner Portal enforces automated security policies for failed login attempts and account inactivity.

IP lockout policies

Repeated incorrect login attempts originating from the same IP address trigger temporary access restrictions:

  • Short-Term lockout: Entering 15 incorrect login attempts within 30 minutes temporarily blocks authentication attempts from that IP address for 30 minutes.
  • Extended lockout: Reaching 45 incorrect login attempts within a 24-hour window blocks authentication attempts from that IP address for 24 hours.

NOTE  IP lockouts apply specifically to the network IP address submitting credentials, not the user account itself. Once the lockout duration elapses, users on that network may attempt authentication again.

Account inactivity policy

  • Automatic inactive user disabling: User accounts with no recorded login activity for 90 consecutive days are automatically disabled.
  • Reactivation: To restore access to a disabled account, contact an organization Partner Portal Administrator to re-enable the user profile.

Troubleshooting locked or disabled accounts

If you or a team member are unable to log in due to failed attempt thresholds or extended inactivity, use the following recovery steps:

Resolving IP lockouts

  • Wait for the lockout timer to expire:
    • For 15 failed attempts in 30 minutes: Wait 30 minutes before attempting to sign in again.
    • For 45 failed attempts in 24 hours: Wait 24 hours from the last failed attempt.

  • Connect via an alternate network or VPN: Because lockouts apply to the originating IP address rather than individual user credentials, switching to a different secure network, mobile hotspot, or VPN allows immediate login attempts.

  • Disable automated credential auto-fill: Ensure that browser password managers or background automation tools are not repeatedly posting expired credentials.

  • Reset password before re-attempting: If unsure of the current password, use the Forgot Password workflow on the login page to set a new password prior to testing credentials, avoiding extended 24-hour lockout thresholds.

Resolving inactive (disabled) accounts

  • Contact your Partner Portal Administrator: Accounts disabled due to 90 or more days of inactivity cannot be self-reactivated. An administrator must navigate to user management and re-enable the account.
  • Verify email confirmations: Following reactivation, complete any required email verification or password reset links sent to your registered inbox.

If your IP address remains blocked after the lockout period has expired, or if your administrator is unable to reactivate your user account, contact Kaseya Support for further assistance.

________________________________________