Two-step sign in

An authenticator code on top of the sign-in, required for anyone who sees pay.

Add a six-digit code from an authenticator app to every sign-in, with backup codes for a lost phone. It is required for admins, payroll officers and anyone who can manage pay.

US$5 per user per month, tax included. 30-day free trial.

A six-digit code from an authenticator app is entered and the session is signed in.
The problem

One stolen inbox should not open everybody’s pay

A sign-in link or a social account is only as safe as the inbox behind it. For the people who can see a whole workforce’s pay, that is not enough. Two-step sign in asks for a code from a device they hold.

How it works

In three steps

  1. Set up once

    Scan a QR code with any authenticator app and save the backup codes.

  2. Enter the code

    Each new session asks for the six-digit code before it counts as signed in, on the web and in the app.

  3. Again for sensitive steps

    Exporting, importing and turning two-step off ask for a code from the last ten minutes.

Outcomes

What you get

  • Required for admins, payroll officers and anyone who manages pay
  • Optional for everyone else and held to once turned on
  • Backup codes for a lost phone
  • Five wrong codes pause entry for 15 minutes

Try it in your own workspace

Free for up to 5 people and 1 site. Pro is US$5 per user per month, tax included, with every feature except payroll and a 30-day free trial.

  • 30 days with every feature
  • Import from Deputy or a spreadsheet
  • Cancel any month