Improved Xero security now available

Any business can be stopped in its tracks if someone gains access to your account through hacking, phishing or other cyber attacks. The good news is that many data breaches can be prevented with simple actions, such as using multi-factor authentication (MFA). This year, all Xero users will need to set up and use MFA to log in to the system.

To make MFA easy, you can choose to use the new Xero Verify app that authenticates your Xero account. It’s the only authenticator App that sends a push notification when you log in to Xero.

And yes, MFA was previously known as Two Factor Authentication!

How to set up MFA

• Have your smartphone on hand and make sure you’ve downloaded Xero Verify from the Apple or Google app store, or your authentication app of choice
• If you don’t have access to a smartphone, you can use Authy, a desktop authenticator, but you won’t get the push notification that Xero Verify would send.
• Log in to Xero from a laptop or desktop computer and follow the instructions on the screen

Xero Verify will send a push notification to your mobile device when you log in for a fast, easy and secure way to authenticate (the App also generates codes in case you don’t have internet access). If you don’t have access to a smartphone, you can use Authy, a desktop authenticator.

Set up only takes about five minutes and gives you the convenience of a simple login process plus the peace of mind that goes with a second layer of security.

Why is Xero making MFA compulsory?

Xero explain this decision as follows:

‘At Xero, we are custodians of your data and we take that responsibility very seriously. We don’t just tick the boxes when it comes to security – we go above and beyond to make sure Xero is the most trusted platform for small businesses.’ You can read more about their decision around MFA here.

Who needs to use MFA?

Users who don’t need to log in to Xero, like payroll employees and those who use the Xero portal and Ask portal, won’t need to set up MFA.

As everyone will need to do so very soon, it makes sense to do it and get used to it while you can choose a quieter day perhaps to do it. Don’t leave it until you’re madly busy and are forced to set it up!

Find out more

For videos, FAQs and more, visit the Xero MFA web page. If you have any problems getting set up, this troubleshooting article might help, otherwise do get in touch.