Page tree


 

 

If you're an accountant or bookkeeper interested using two-factor authentication (2FA) in your practice, there are a few important details you should consider.

Should my practice use 2FA?

Yes. 2FA keeps your data secure, and it's mandatory from 30 June 2018 to meet new industry standards.

You can set up 2FA using either an email account, or an authenticator app. The right option for you will depend on the way your office is set up. Does everyone have a unique login, or do you share? Does everyone have a smartphone? Does everyone have access to the email account associated with their login details? Help me choose.

For general information on MYOB's 2FA, see the Two-factor authentication help page.

Note that implementing two-factor authentication will not affect access to:

  • your Accountants Enterprise or Accountants Office Suite, or
  • your online practice functions, such as MYOB Portal, dashboard and online tax features via the AE/AO Live icon.

Remember - your team members can select the option Trust this device for 30 days, so they won't need to type a verification code every time they sign in (if they're using the same computer).

  FAQs


Where can I learn more about the security technology behind 2FA?

Where can I learn more about the security technology behind 2FA? 

If you'd like to learn more about the security technology behind MYOB's two-factor authentication - including the authentication app - please read The Security of MYOB's Two-Factor Authentication White Paper.

Is 2FA mandatory for my practice?

Is 2FA mandatory for my practice?

2FA has been mandatory since 30 June 2018 to meet new industry standards. Set up 2FA today.

How do I get help if I have trouble with 2FA?

How do I get help if I have trouble with 2FA? 

If you need help with two-factor authentication, first have a look around this online help centre. For example, if you need help setting up 2FA, see Setting up two-factor authentication. Or if you need help accessing your backup codes, see Using your backup codes. Check out the Related Topics section on the right side of each help page for more recommendations.

If you need additional support, please contact us:

If you use Accountants Enterprise or Accountants Office, click here for MYOB contact information.

For all other MYOB Partner support, contact us here: Australia / New Zealand

Will this impact my access to multiple client files?

Will this impact my access to multiple client files?

2FA is associated with your login, not the files you're accessing. This means if you've set up 2FA for your login, 2FA will be used regardless of which file you're accessing.

If a client hasn't already done so, ask them to invite you to access their books online. Learn more about advisor invitations for MYOB Essentials Accounting and MYOB AccountRight. You'll then be able to access their file using your 2FA enabled login.

I’m using shared logins - how can I use an authenticator app?

I’m using shared logins - how can I use an authenticator app?

Because most authenticator apps can only be installed on one device, using shared logins creates a problem when multiple people need access to the app.

Ideally, everyone should have their own unique log in details. If you’re using a shared login, you should think about moving to unique logins.

If unique logins aren’t possible, you have three options:

  1. Use a shared phone.
    Do you have a corporate phone that could be shared in the office? You can set up an authenticator app on the shared phone, and make sure all shared users have access to it.
    Consider how practical this solution will be for your office. For instance, how would team members work outside the office?

  2. Use an authenticator app called Authy .
    With Authy, you can set up an account and share the credentials across multiple devices. Each user can access it in a browser or install it as a desktop or mobile app, and sharing credentials means that they can all access the same 2FA codes.

  3. Use email 2FA.
    If everyone using your shared login has access to the email account associated with that login, you can use email 2FA. All users need access to the email inbox so that they can receive the authentication code when they log in.
I don’t want my team to install an app on their private phone / I don’t want my team to have their mobile phone at their desk

I don’t want my team to install an app on their private phone / I don’t want my team to have their mobile phone at their desk

If your team using their private phones for 2FA is a problem, there are a few options to consider.

  1. Use a shared phone.
    Do you have a corporate phone that could be shared in the office? You can set up an authenticator app on the shared phone, and make sure all shared users have access to it.
    Consider how practical this solution will be for your office. For instance, how would team members work outside the office?

  2. Use an authenticator app called Authy .
    With Authy, you can set up an account and share the credentials across multiple devices. Each user can access it in a browser or install it as a desktop or mobile app, and sharing credentials means that they can all access the same 2FA codes.

  3. Use email 2FA.
    If everyone using your shared login has access to the email account associated with that login, you can use email 2FA. All users need access to the email inbox so that they can receive the authentication code when they log in.
Do authenticator apps require mobile coverage, data or internet access?

Do authenticator apps require mobile coverage, data or internet access?

Once installed, most authenticator apps don't require mobile coverage, data or internet access. But it's best to check the settings within your authenticator app to see if you need to enable offline functionality.

Going overseas? No problem, your authenticator app will still work. If the Google Authenticator app stops working while overseas, it might be a time sync issue (see this Google support doc for help).

If you have any issues using your authenticator app (overseas or at home), check the help for your app.

What if I don't have a smart phone or access to my email when visiting clients?

What if I don't have a smart phone or access to my email when visiting clients?

There's a couple of options:

  • Use an authenticator app called Authy
    You can install Authy on your laptop and use it for 2FA.
  • Use your backup codes
    Use a “one time use” backup code to sign in at client sites. These codes were generated when you set up two-factor authentication and allow you to sign in to your MYOB account when you don't have a phone. Learn more about using your backup codes.