Set up two-step sign-in and automatic sign-out

Two-step sign-in means someone who learns your password still can't open your books without a code from your phone. Automatic sign-out closes the books on a computer that's left alone. Both are in Settings.

Before you start

• Install an authenticator app on your phone, such as Google Authenticator, Microsoft Authenticator, 1Password, or Authy.

Steps

1. Go to Settings and find Two-step sign-in.
2. Click Set up two-step sign-in.
3. Scan the code. In your authenticator app, add an account and scan the code on the screen. If you can't scan it, click Can't scan? Enter this key instead and type the key into the app.
4. Enter the 6-digit code the app shows, then click Turn on.
5. Save your recovery codes. Copy, download or print the ten one-time codes, tick I saved my recovery codes somewhere safe, and click Done. The section now shows On.
6. Choose the sign-out time (owners). Find Automatic sign-out and pick a time in Sign out after no activity for: 5 minutes, 10 minutes, 15 minutes, 30 minutes, or 1 hour. It saves right away.

Good to know

• From now on, signing in asks for your password and then a 6-digit code from the app.
• Codes change every 30 seconds. If a code doesn't work, enter the one showing now.
• Owners must keep two-step sign-in on. An owner who hasn't set it up sees Protect your books and sets it up before opening the books.
• If you don't own any books, you can click Turn off in the Two-step sign-in section. Your account is then protected by your password only.
• On your own computer, tick Don't ask again on this device for 30 days when you enter a code. That device then signs in with just your password. Trusted devices in Settings lists them, with Forget for each. See Turn on two-step sign-in.
• Lost your phone? Sign in with your password, click Use a recovery code, and type one of your saved codes. No codes left? Email info@agilegnosis.com from your account's email address. To keep your books safe, we write back to that address, ask you about something only you would know (like a recent transaction in your books), check with any other owner, and email everyone involved. The reset can't happen until 24 hours later, so you can stop it if it wasn't you. We'll never ask for your password, bank numbers or ID. Afterward, set up two-step again and save your new recovery codes.
• The sign-out time applies to everyone in that organization. New organizations start at 15 minutes, which is recommended.
• Choose 5 minutes for a shared office or church computer. 30 minutes or 1 hour suits a personal computer only you use.
• A Still there? message appears one minute before sign-out. Click Stay signed in to keep working.
• Working in one browser tab keeps your other Balancivo tabs signed in, too.
• Bookkeepers see the time the owner chose, but can't change it.