Setting up my Two-Factor Authentication (2FA) | HR Web Platform

When using a username and password to log into your account, you are only using single-factor authentication. This process is susceptible to security threats because it represents a single piece of information a malicious person requires.

Employment Hero allows you to enable two-factor authentication for your account. Which means you will need two verification steps before you can access your account. The additional step is an authentication code sent as a text message (SMS) or via an authentication app.

Once enabled, your account generates a unique authentication code any time there is a sign-in attempt from an unrecognised device. To sign into your account, it will require you to know both the password and have access to the authentication code sent as a text message (SMS) or via an authentication app.

Important

You can enable mandatory two-factor authentication from your employment settings page. To read further details on how to access this feature, refer to this article.

If one of your employees has trouble accessing their account with Two-Factor Authentication enabled, you can reset their Two-Factor Authentication access via the Security Report feature. To read further information on this feature, refer to the following article

HR Best Practise

Enabling 2FA delivers an extra layer of protection for your user accounts that will decrease the risk of unauthorised access and platform breaches.

Availability

HR Plan:   Premium   Platinum
  User Access:   Employee         Manager         Admin      

  We base the default access level on a per user basis and whether they have  view,  edit and  delete access and excluding any changes made via our Custom Security feature.

Getting started

Enable two-factor authentication: Authenticator app

Important

Users on a standard, premium and/or platinum plan can use two-factor authentication via an authenticator app or SMS. Employment Hero users on a Free plan will only be able to use two-factor authentication via an authentication app.

  1. Click the User drop-down.
  2. Click on the Account Settings button.
  3. Click the Setup button.
    Two_Factor_1.jpg
  4. Select the Through an authentication app option.
  5. Click the Continue button.
    Two_Factor_2.jpg
  6. Scan the QR code using your authenticator app.
  7. Click the Continue button.
    Two_Factor_3.jpg
  8. Type the code number from your authentication app into the Text field.
  9. Click the Continue button.
    Two_Factor_4.jpg
  10. Select from the following recovery code options:
    • Download.
    • Print.
    • Copy.
  11. Click the Done button.
    Two_Factor_5.jpg
  12. Click the Yes button.

    Important

    If you no longer have access to your phone and can not access an authenticator service via text and/or an app, you can use the recovery code to sign in. Please store this code in a safe place.

    Two_Factor_6.jpg
Enable two-factor authentication: Text message

Important

Employment Hero users on a Standard or Premium plan can use two-factor authentication via an authenticator app or SMS. Employment Hero users on a Free plan will only be able to use Two-Factor Authentication via an authentication app.

  1. Click the User drop-down.
  2. Click on the Account Settings button.
  3. Click the Setup button.
    Two_Factor_1.jpg
  4. Select the Through SMS Text Messages option.
  5. Click the Continue button.
    Two_Factor_7.jpg
  6. Select your phone region via the Country drop-down.
  7. Type your phone number into the Phone Number field.
  8. Click the Continue button.
    Two_Factor_8.jpg
  9. Type the verification code sent via text message into the Verification Code field.
  10. Click the Continue button.
    Two_Factor_9.jpg
  11. Select from the following recovery code options:
    • Download.
    • Print.
    • Copy.
  12. Click the Done button.
    Two_Factor_10.jpg
  13. Click the Yes button.

    Important

    If you no longer have access to your phone and can not access an authenticator service via text and/or an app, you can use the recovery code to sign in. Please store this code in a safe place.

    Two_Factor_11.jpg

Editing data

Edit my recovering question
  1. Click the User drop-down.
  2. Click on the Account Settings button.
  3. Click the Edit button.
    Two_Factor_14.jpg
  4. Complete the following fields:
    • Recovery question.
    • Recovery answer.
    • Current password.
  5. Click the Save button.
    Two_Factor_15.jpg

Removing data

Disabling two-factor authentication
  1. Click the User drop-down.
  2. Click on the Account Settings button.
  3. Click the Disable button.
    Two_Factor_12.jpg
  4. Enter your password and click the Continue button.
    Two_Factor_13.jpg

Further information

What happens if I lose my phone?

If you lose access to your two-factor authentication device, e.g. you lose your phone, you can still log in to your account. When prompted for your authentication code, enter your recovery code shown during the two-factor authentication setup.

Once you have logged in to your account, update your two-factor authentication information.

What happens if I change my phone number?

If you change to a new phone number, you will need to disable two-factor authentication and then re-enable two-factor authentication using your new number.

What is an authenticator app?

Rather than having a code sent to you via SMS when you sign in, an authenticator app on your phone can generate a code. You can enter this into Employment Hero the same way as with text codes. Authenticator apps do not have access to your Employment Hero account or your personal/sensitive information.

What countries support sending an authentication code via text message?

The below-listed countries support the ability to receive a two-factor authentication code via a text message:

  • Australia.
  • Aland islands.
  • Cocos islands.
  • Christmas island.
  • Finland.
  • Malaysia.
  • New Zealand.
  • Philippines.
  • Singapore.
  • Vietnam.
  • United Kingdom.

Author recommended

So you have now set up your two-factor authentication and you are now wondering, what next can I do. There are two recommendations I would make on this front and they are:

Was this article helpful?

Comments

0 comments

Article is closed for comments.