Set up two-step sign-in

Two-step sign-in adds a code from an authenticator app to your password. Each person sets it up on their own account.

Set up your account

1. Open your personal account's Security settings.
2. Select Setup a new Factor.
3. Give the factor a recognisable name.
4. Follow the on-screen instructions to add it to your authenticator app.
5. Enter the current code and complete Enable Factor.
6. Confirm the factor is listed as enabled.

Keep access to the authenticator when changing phones. Set up and test the replacement before removing the old factor where possible.

Require it for the firm

The owner controls the firm's two-factor requirement in its general settings.

1. Enable your own factor and sign in with it.
2. Have staff enrol their authenticators.
3. Turn on the firm's requirement.
4. Check that staff can sign in and open a case.

Staff must complete the second step to access protected case data. Owners must also meet the firm’s requirement before opening subscription checkout, the billing portal or Stripe account setup. The setup route remains available so they can enrol.

Lost phone or rejected code

Use another enrolled factor if you have one. For a rejected code, check the phone's automatic time setting and enter a fresh code for the correct account.

If no enrolled factor is accessible, contact your manager or the external support contact supplied to your firm for account recovery. The current staff controls do not provide an owner reset button for another person's authenticator.

Never send an authenticator code, password or recovery credential in a support message. See Account and access problems.

See Contact support for reports, attachments and help when you cannot sign in.