Administrators #
Two-factor authentication (2FA) means signing in needs a code as well as your password, so a stolen password is no use on its own. Your Client or Company may require it; otherwise you can turn it on yourself.
Administrators: open Setup > Two-factor authentication.
Employees #
Employees: in the app, click 2FA at the top.
Turning it on #
If it is up to you, click Turn on two-factor authentication.
If your Client or Company requires it, you are taken to set it up as soon as you sign in, and can do nothing else until you have.
Choosing how to get your codes #
Click Next, then choose how you will get your codes:
- Authenticator app: an app on your phone, such as Google Authenticator, Microsoft Authenticator or 1Password. It works without a signal, and is the safer choice. Install one first.
- Email: a code is emailed to you each time you sign in.
If your Client or Company requires an app, there is no choice to make, and this step is not shown.
Scanning the code #
For an app, scan the QR code with it, or type in the key shown beside it. Then enter the six-digit code the app shows, and click Next.
For email, enter the code we send you.
Backup codes #
Once the code is accepted, two-factor authentication is on. Click Show my backup codes, and keep them somewhere safe, such as wherever you keep your passwords.
There are 10, and each lets you sign in once without your phone. Once you have used one, make a new set: open Two-factor authentication, click Show backup codes, then Generate new codes. The old ones then stop working.
Signing in #
From then on, signing in asks for your username and password as usual, then for a code: the one your app shows, or the one emailed to you.
Without your phone, click I don't have my device: use a backup code.
If you lose your phone #
Use one of your backup codes. If you have none left, ask an administrator to reset your two-factor authentication. They do this from Dashboards > Recent Logins, and you set it up again the next time you sign in.