26 Sep 2018
In today's world of increasing digital crime most people will be very familiar with the importance of online security, logins, usernames and passwords.
iPayroll introduced Two Factor authentication (2FA) in 2017 which is currently optional for all users (including Employee Kiosk). At some stage we will need to make this mandatory, however in the meantime we strongly recommend all iPayroll Users enable 2FA.
What is two factor authentication?
Two Factor Authentication, often referred to as two-step verification, is an extra layer of security. It requires not only a username and password, but also something that only the user has on them, i.e. a piece of information like an authentication code from another device.
How does it work?
Using a username and password, together with an authentication code, it is harder for potential intruders to gain access to personal and confidential data or identity.
Using a 2FA process can help to lower the number of cases of identity theft on the internet, as well as phishing via email, because the access requires more than just the user’s name and password details.
Enabling 2FA in iPayroll
Firstly you will need an Authenticator app. There are several Authenticator apps available for use and you can choose to work with a desktop or smartphone based app or one that works across both platforms. The two most commonly used on a smartphone being the Google Authenticator app or the Microsoft Authenticator app.
You can install the Google Authenticator app here:
You can install the Microsoft Authenticator app here:
To enable 2FA for your iPayroll account using a smartphone or desktop app:
- Log in to iPayroll
- Click on your username at the top of the page and then select the Two Factor Authentication menu
- Install an authenticator app on your smartphone or desktop (if you have not already done so)
- Open the authenticator app and select to scan the barcode displayed on this page or enter the alternative time-based key
- The authenticator app will display a 6-digit code. Enter the code in the 'Verification code' field on the screen and click on 'Confirm' - this will pair your phone with iPayroll
Going forward when you log in to iPayroll, you will see an extra step.
After you enter your username and password, the system will show an extra screen asking for your authentication code. To find the authentication code, open your authenticator app and enter the 6 digit code presented there.
When successful - the system will take you to your dashboard.
The code provided by an authenticator app refreshes every 30 seconds.
As an employer or payroll administrator, if you lose your phone and need to unlink the Authenticator app to gain access to iPayroll without 2FA you can contact another paymaster in your organisation or contact our helpdesk.