Turn on two-step sign-in

Two-step sign-in means Balancivo asks for your password and a 6-digit code from an app on your phone. Someone who learns your password still can't open your books. Owners can run payroll, connect banks and change who has access, so every owner must have it on.

Before you start

• Install an authenticator app on your phone, such as Microsoft Authenticator, Google Authenticator, 1Password or Authy. They're free in the App Store and Google Play.

Steps

1. Start setup. Owners see Protect your books right after creating an organization or signing in. Anyone else can go to Settings and find Two-step sign-in.
2. Click Set up two-step sign-in. A QR code appears.
3. Scan the code. In Microsoft Authenticator, tap +, then Other account, and scan the code. In Google Authenticator, tap +, then Scan a QR code. If you can't scan it, click Can't scan? Enter this key instead, then Copy key, and paste or type it into the app.
4. Enter the 6-digit code the app shows for Balancivo, and click Turn on.
5. Save your recovery codes. Balancivo shows ten one-time codes, only this once. Click Copy, Download or Print, keep them somewhere safe and private, tick I saved my recovery codes somewhere safe, and click Done.

Signing in after that

1. Enter your email and password and click Sign in.
2. Type the code from your authenticator app in Code from your authenticator app.
3. On your own computer or phone, tick Don't ask again on this device for 30 days. Leave it off on a shared or public computer.
4. Click Verify code.

Lost your phone?

1. Sign in with your email and password.
2. Click Use a recovery code under the code box.
3. Type one of your recovery codes and click Use recovery code. Capital letters, spaces and the dash don't matter.
4. Set up your new phone. Owners see Protect your books and set up two-step sign-in again, which also gives new recovery codes.

Using a recovery code removes your old authenticator app, forgets your trusted devices, signs you out everywhere else, and emails you that it was used. No recovery codes? Email info@agilegnosis.com from your account's email address and we'll help.

Good to know

• Codes change every 30 seconds. If you see "That code didn't work," enter the one showing now.
• A trusted device signs in with just your password (or a passkey) for 30 days. A few things still need a code from this sign-in: connecting a bank, billing, deleting a company, inviting people or changing their roles, connecting a mailbox, changing two-step settings and the Admin pages. Balancivo asks for it right there, or you can enter it under Settings, Two-step sign-in. You don't have to sign out.
• See and forget trusted devices in Settings, under Two-step sign-in, Trusted devices. Forget all makes every device ask for a code again.
• Recovery codes in Settings shows how many you have left. Make new recovery codes replaces them all (it asks for a code first). Balancivo warns you when 3 or fewer are left.
• Turn on cloud backup in your authenticator app (in Microsoft Authenticator: Settings, then Cloud backup), so a new phone brings your codes with it.
• Owners can't turn two-step sign-in off. Settings shows "Owners must keep two-step sign-in on."
• Bookkeepers can turn it off from Settings with Turn off.
• Connecting a bank also needs two-step sign-in. See Connect your bank.
• If you need to stop partway, click Cancel, or Sign out at the bottom of the screen.