Blog Post

MYOB Announcements
2 MIN READ

Secure your account with SMS two-factor authentication (2FA)

Mike_MYOB's avatar
Mike_MYOB
Community Manager
6 months ago
Hi everyone,  We’re introducing an important security update to your MYOB login. Data security is our top priority. To add an additional layer of security and help protect your account, we’ll soo...
Published 6 months ago
Version 1.0
announcements
Mike_MYOB's avatar
Mike_MYOB
Community Manager
5 months ago

Hi MYOBENQ​ , authenticator app is absolutely still available as an option, and ideally we would love for customers to have more than one method enabled. This change means that all customers must have SMS enabled, but they can also have a secondary method as well

Learoy's avatar
Learoy
Trusted Cover User
5 months ago

HI Mike,

I asked earlier if we have the authenticator app do we need to set up SMS. I received this response from Doreen_P (MYOB Moderator). "Nice work getting the authenticator app up and running. That’s exactly what we recommend and there's no need to set up SMS 2FA. You’ll still have full access to your MYOB account with just the authenticator app."

Regards,

Learoy

  • Mike_MYOB's avatar
    Mike_MYOB
    Community Manager
    5 months ago

    Hi Learoy​ , thanks for bringing this to my attention. 
    This reply was incorrect in saying that there is no need for SMS 2FA
    All customers will be required to have SMS 2FA set up but they can have (and we encourage) a second method as well.
    In your case, this would be the authenticator app combined with SMS as two methods of authentication 

    • PowerC's avatar
      PowerC
      Experienced Cover User
      5 months ago

      But as I said previously both of these forms of identification require a phone.  What happens if a phone is lost or stolen, or even inadvertently left at home?   Why can't we choose one of these & email.  We are unable to add email now if we didn't previously.  Sorry this is just silly

    • MickyH75's avatar
      MickyH75
      Experienced User
      5 months ago

      Is there a justification for this blanket enforcement of a fairly unsecure method when people already have to have a 2FA system in place? It's enough that 2FA has been forced upon us but locking people out of a system that they're paying for is a bit of a joke. If they don't agree does that mean they get a refund of their fees for the period that they're locked out?