Two-Factor authentication (2FA)

Overview

Two-Factor Authentication provides an additional verification level when logging into your account, ensuring that you are the only person who can access it.

When using a username and password to log into your account, you are only using a single-factor authentication. This process is susceptible to security threats because it represents a single piece of information a malicious person requires.

Employment Hero allows you to enable two-factor authentication for your account, requiring two verification steps before you can access your account. This additional step is an authentication code sent as a text message (SMS) or via an authentication app.

Once enabled, your account generates a unique authentication code any time there is a sign-in attempt from an unrecognised device. To sign into your account, it will require you to know both the password and have access to the authentication code sent as a text message (SMS) or via an authentication app.

Important

You can enable mandatory two-factor authentication from your employment settings page. For details on how to access this feature refer to this article.

Important

If you are an account owner, administrator, or user with access to other employees superannuation/tax information, we require you to enable two-factor authentication to access this information. This is because of the ATO's updated digital service provider operational framework. You can find more information here.

Availability

HR Plan:   Free   Standard   Premium   Platinum
Payroll Plan:   Standard   Premium

Getting Started

Enabling two-factor authentication: Authenticator app

Important

Employment Hero users on a standard, premium and/or platinum plan can use two-factor authentication via an authenticator app or SMS. Employment Hero users on a Free plan will only be able to use two-factor authentication via an authentication app.

  1. Open up the user drop-down menu from the top right-hand corner.
  2. Click on the Account Security button.
  3. In the Two-Factor Authentication section, click the Setup button.
    2FA_1.jpg
  4. Select the Through an authentication app option.
  5. Click the Continue button.
    2FA_2.jpg
  6. Scan the QR code using your authenticator app and then click the Continue button.
    2FA_3.jpg
  7. Type the code number from your authentication app into the text field.
  8. Click the Continue button.
    2fA_4.jpg
  9. For your recovery code, select from the following options:
    • Download.
    • Print.
    • Copy.
  10. Click the Done button.
    2FA_5.jpg
  11. Click the Yes button.

    Important

    If you no longer have access to your phone and can not access an authenticator service via text and/or an app, you can use the recovery code to sign in. Please store this code in a safe place.

    2FA_6.jpg
Enabling two-factor authentication: Text message

Important

Employment Hero users on a Standard or Premium plan can use two-factor authentication via an authenticator app or SMS. Employment Hero users on a Free plan will only be able to use Two-Factor Authentication via an authentication app.

  1. Open up the user drop-down menu from the top right-hand corner.
  2. Click on the Account Security button.
  3. In the Two-Factor Authentication section, click the Setup button.
    2FA_7.jpg
  4. Select the Through SMS Text Messages option.
  5. Click the Continue button.
    2FA_8.jpg
  6. Select your phone region and type your phone number in.
  7. Click the Continue button.
    2FA_9.jpg
  8. Type the code number from your text message into the text field.
  9. Click the Continue button.
    2FA_10.jpg
  10. For your recovery code, select from the following options:
    • Download.
    • Print.
    • Copy.
  11. Click the Done button.
    2FA_11.jpg
  12. Click the Yes button.

    Important

    If you no longer have access to your phone or otherwise can't access codes via text or the authenticator app, you can use the recovery code to sign in. Please store this code in a safe place.

    2fA_12.jpg

Maintain

Disabling two-factor authentication
  1. Open up the user drop-down menu from the top right-hand corner.
  2. Click on the Account Security button.
  3. Click the Disable button.
    2FA_13.jpg
  4. Type your password in and click the Continue button.
    2FA_14.jpg

Further information

What happens if I lose my phone?

If you lose access to your two-factor authentication device, e.g. you lose your phone, you can still log in to your account. When prompted for your authentication code, enter your recovery code shown during the two-factor authentication setup.

Once you have logged in to your account, update your two-factor authentication information.

What happens if I change my phone number?

If you change to a new phone number, you will need to disable two-factor authentication and then re-enable two-factor authentication using your new number.

What is an authenticator app?

Rather than having a code sent to you via SMS when you sign in, an authenticator app on your phone can generate a code. You can enter this into Employment Hero the same way as with texted codes.

Authenticator apps do not have access to your Employment Hero account or your personal/sensitive information.

Have more questions? Submit a request

Comments

0 comments

Article is closed for comments.