Enabling Two-Factor Authentication (2FA)
Require a code at sign-in so a stolen password isn't enough to get into your account
Applies to: Workforce · Premium · LawBillity
Two-factor authentication (2FA) means a stolen password isn't enough to get into your account. After entering their password, each person also enters a code, sent by email or shown in an authenticator app. It's a good idea for any firm, and especially for firms that hold sensitive client data, such as legal, financial, and healthcare firms.
Turning On 2FA (Admins)
- Click Admin > Settings > System Settings.
- Set Two-factor authentication to On.
- Choose whether people can trust their browser or device. If you choose Yes, they can skip verification on that device for 30 days.
- Click Save.
Important: When you save, everyone at your firm is signed out right away and emailed instructions for setting up 2FA. Warn your team first, and don't do it in the middle of a busy day.
2FA applies to everyone at the firm. There's no setting to make it optional for some people.
Signing In With 2FA
- Follow the setup instructions in the email Time Tracker sends you.
- Sign in with your email and password as usual.
- Enter the verification code. It comes by email, or from the Google or Microsoft authenticator app if you set one up.
- If your firm allows it, choose to trust this browser or device, so you won't be asked again on it for 30 days.
Common Problems
- The email code didn’t arrive. Check your spam or junk folder, and make sure you're signing in with the email address your firm invited.
- The authenticator code isn’t accepted. Codes depend on the time. Make sure your phone's clock is set automatically, then try the newest code.
- You’re asked for a code every time. Your firm may not allow trusted devices, or your browser is clearing cookies. Ask your admin.
- Something else is stopping you from signing in. See I Can’t Log In: What Should I Do?.