Skip to main content
English (Canada) English (United Kingdom) English (Hong Kong) English (Malaysia) English (New Zealand) English (Singapore) Bahasa Melayu

Set up or disable two-factor authentication (2FA)

Updated

Available for the following plans: Plus, Unlimited HR, Engage, Elite, Unlimited HR+Payroll
Available for the following plan: Premium, Platinum
Available for the following user access levels: Employee, Manager, Admin

Two-factor authentication (2FA) adds an extra layer of security to your applications, devices, and more. It is a crucial way to protect your sensitive information.

Employment Hero uses 2FA to help keep your account secure. This article explains how to set up 2FA using an authenticator app or an SMS authentication method to receive the required passcode. For more details on enabling 2FA for your employees or organisation, refer to this article. 

Important

If you are an account owner, administrator, or user with access to other employees' superannuation or tax information, you are required to enable two-factor authentication (2FA) to access this information. This requirement is due to the Australian Tax Office (ATO) having updated its operational framework for digital service providers. For more details, please refer to this page.

Enable 2FA

Enable 2FA using EH Authenticator app
  1. Click your account user name.
  2. From the drop-down menu, select Account Settings.

  3. On the Employment Hero Authenticator tile, click the Setup button.

    screenshot of Account Settings page, highlighting Employment Hero Authenticator tile's Set up button

  4. Use your mobile device to scan the QR code.

    screenshot of Account Settings page's 'Employment Hero Authenticator Setup; popup, highlighting QR code

  5. Your mobile device will now open the Employment Hero Work app or otherwise provide you with a page to download it.
  6. On your Employment Hero Work app. You can also learn more in this article on the Employment Hero Work Help Centre.

Important

If you no longer have access to your phone and can not access an authenticator service via text and/or an app, you can use the recovery code to sign in. Please store this code in a safe place.

Enable 2FA using authenticator app
  1. Click your account user name.
  2. From the drop-down menu, select Account Settings.

  3. On the Authenticator app tile, click the Setup button.

    screenshot of Account Settings page, highlighting Authenticator app tile's Set up button

  4. Choose to do one of the following:
    • Open your chosen authenticator app on your mobile device and use it to scan the QR code.

    • Click the Can't scan code? drop-down button and enter the key (a code in red text) in your chosen authenticator app.

      screenshot of 'Account settings' page's 2-Factor Authentication setup popup, highlighting QR code and Continue button

  5. Refer to the six-digit code your authenticator app has provided and enter it in the Verification code field.

  6. Click the Continue button.

    screenshot of Account Settings page's 2-Factor Authentication setup popup, highlighting 'Verification code' field and Continue button

  7. Refer to your one-time recovery code and click one of the following buttons:
    • Download
    • Print
    • Copy
  8. Store the code somewhere safe for yourself.

  9. Click the Done button.

    screenshot of '2-Factor Authentication setup' popup showing one-time recovery code and highlighting Copy button and Done button

  10. On the Are you sure? window, click Yes.
  11. Your chosen 2FA method will now be active. Keep your one-time recovery code safe in case you lose access to your device.
Enable 2FA using SMS

Important

SMS authentication is currently only available on paid plans. Users on the Free plan will not have access to this option for now.

  1. Click your account user name.
  2. From the drop-down menu, select Account Settings.

  3. Click the View options drop-down button.

    screenshot of Account Settings page, highlighting 'View options' drop-down button

  4. On the SMS Authentication tile, click the Setup button.

    screenshot of Account Settings page, highlighting 'Set up' button on 'SMS Authentication' tile

  5. Click the Country drop-down field and select your phone region.
  6. In the Phone number field type your phone number.
  7. Click the Continue button.
    smssetup2fa02.jpg
  8. Find the verification code text message on your mobile device then type it in the Verification code field.
  9. Click the Continue button.
    smssetup2fa03.jpg
  10. Select one of the following recovery code options:
    • Download
    • Print
    • Copy
  11. Click the Done button.
    setup2fa04.jpg
  12. Click the Yes button.
    setup2fa05.jpg
  13. Your chosen 2FA method will now be active. Keep your one-time recovery code safe in case you lose access to your device.

Disable 2FA

Disable chosen 2FA method
  1. Click the User drop-down.
  2. Click on the Account Settings button.

  3. Find the authentication method you want to disable and click its Edit button.

    screenshot of Account Settings page, highlighting one of the authentication option's Edit button

  4. Enter your password and click the Continue button.

    screenshot of Account Settings page's password re-entry window, highlighting Password field and Continue button

  5. Click the toggle.
    screenshot of Account Settings page's 'Your Authenticator' window, highlighting on:off toggle
    • If the toggle moves, enter your password when prompted then click the Continue button. Your chosen 2FA method will be disabled.
    • If the toggle does not move, a prompt will appear saying you must enable another method before disabling your current 2FA. Click the Change button and follow the Enable 2FA using authenticator app instructions here.
      screenshot of Account Setting's page's 'Your Authenticator' window, highlighting Change button.jpg

Configure device memory

Set up how many days devices are remembered after 2FA

Admins can enable device memory for platform users. This means that when a user goes through two-factor authentication (2FA) on a device, they do not need to go through 2FA again every time they log in on that same device for a certain number of days.

  1. Click Settings on the menu on the left-hand side of your screen.
  2. Under Security & Access Control, click Two-Factor Authentication.
  3. Click the toggle switch on for Enable Device Memory.
    • The switch is "on," meaning the feature is enabled, if the button is purple.
  4. In the Duration field, type the number of days devices are remembered before requiring 2FA for log in again. 

Disable device memory

Disabling device memory means users have to go through 2FA every time they log in.

  1. Click Settings on the menu on the left-hand side of your screen.
  2. Under Security & Access Control, click Two-Factor Authentication.
  3. Click the toggle switch off for Enable Device Memory.
    • The switch is "off," meaning the feature is disabled, if the button is grey.

Further information

What do I do if I lose access to my 2FA?

If you lose access to your two-factor authentication (e.g. you lose your phone), you can still log in to your account. When prompted for your authentication code, enter your recovery code shown during the two-factor authentication setup.

Once you have logged in to your account, update your two-factor authentication information.

Additionally, this article explains how to use Employment Hero's user account recovery feature.

What happens if I change my phone number?

If you change to a new phone number, you will need to disable two-factor authentication and then re-enable two-factor authentication using your new number.

What is an authenticator app?

Rather than having a code sent to you via SMS when you sign in, an authenticator app on your phone can generate a code. You can enter this into Employment Hero the same way as with text codes. Authenticator apps do not have access to your Employment Hero account or your personal/sensitive information.

What authenticator app should I use?

There are several authenticator apps available for your devices. We generally recommend the following:

What countries support sending an authentication code via text message?

The below-listed countries support the ability to receive a two-factor authentication code via a text message:

  • Australia.
  • Aland islands.
  • Cocos islands.
  • Christmas island.
  • Finland.
  • Malaysia.
  • New Zealand.
  • Philippines.
  • Singapore.
  • Vietnam.
  • United Kingdom.
The risks and importance of two-factor authentication

2FA adds a strong layer of account security because it neutralises the risks associated with compromised passwords. By involving you in the login process, attackers will not be able to access your account, even if they have compromised your email and password credentials.

Employment Hero platforms contain sensitive personal information such as contact, banking, and superannuation details. By securing your account with 2FA, you are reducing the likelihood of attackers gaining access to this information.

Explore related content

Powered by Zendesk