Let’s be honest: Security isn’t something to brag about—it’s expected.
If you’re an MLS or Association, your members trust you to protect their data, their access, and their businesses. It’s not optional. It’s the bare minimum.
At REcore, we know this. But we also know the bare minimum isn’t enough.
We’re not just checking boxes—we’re building a platform that evolves as threats change and adapts as your needs grow. With the help of our engineering team—and input from some of the largest MLSs in the country—we’ve taken a close look at security risks, and how to stay ahead of them.
Some security measures are already in place with the rest coming soon. All designed to work quietly in the background, without slowing anyone down.
What’s Already in Place
In recent months, we’ve rolled out several upgrades across both CRMLS and NorthstarMLS. These changes focus on identifying threats early and responding automatically:
- Geo IP Filtering: If someone tries to log in from outside North America, we flag it or block it.
- Password Expiration Policies: Credentials expire on a schedule—no more “set it and forget it.”
- Login Behavior Scoring: We track success/failure rates by source and adjust trust levels automatically.
- Real-Time Account Locking: If a threat is suspected or detected, access can be cut instantly—no waiting on support.
What’s Next (Coming Mid-September)
REcore is working on a broader set of protections to layer on top of what’s already there, starting with a modern, flexible approach to authentication:
MFA (Multi-Factor Authentication)
Members can choose the method that works best for them:
- SMS
- Authenticator apps like Google Authenticator
Multifactor authentication has been on-device for a period of time, preserving security without burdening your users.
Passkeys
This is the future. No more passwords—just biometric logins (like Face ID or Touch ID) or a PIN tied to your device. It’s easier for users and nearly impossible to phish.
Human Verification at Login
A small but powerful change: a behind-the-scenes “proof-of-work” check to help keep bots out. No annoying CAPTCHAs, just smarter protection.
Built-In, Not Bolted On
The truth is anyone can buy security software. What makes REcore different is how deeply these features are integrated into the platform. This means better performance, better coordination across systems, and fewer headaches for your support teams.
And because our team is made up of MLS pros, we’ve made sure the rollout fits how the industry works—not just how software is usually built.
So, What Happens Next?
We’ll share more details in this month’s newsletter. Make sure you’re on the list.
Sign up here.
By mid-September, watch for a bigger announcement—especially once MFA and Passkeys go live across the platform.
Until then, we’re focused on making sure everything works exactly the way it should—and that MLSs have the tools and information they need to communicate changes clearly to their members.
Want Help Implementing This?
If you’re thinking about making the switch or just want to talk through your own security roadmap, we’re happy to help. Our consulting team includes former MLS execs, brokers, and tech leads who’ve dealt with all of this firsthand.
