MYOB 2FA options are changing (again!!!)

Hi Hydro-Tech, 

Thanks for sharing your thoughts on this. I can see why some workflows do not sit well with this change.

You’re right that passkeys and SMS are a much better fit for individual logins than shared ones.

If email 2FA is already being used, it will not stop straight away. But going forward, the direction is moving away from email codes and toward passkeys or app-based 2FA.

That does make things harder for businesses using one shared login, so your concerns are fair. 

Regards,
Genreve

Hi David,

We are in the same situation. I have asked this question before and was told that everyone has to have their own email addresses to log on to MYOB. We all use the one business email address which has served us well for years. This was MYOB's response:

"Each person who signs in is expected to have their own unique MYOB login, which is tied to an individual email address. Multiple users sharing the same email address for separate logins is typically not supported. (even though it has been supported for at least 15 years)

That said, if everyone is literally sharing one MYOB user account (same email and password), it may work in some situations, (in my experience it has worked in all situations)but it isn't recommended because:

You can't reliably see who made changes.

Audit trails and approvals become less useful.

Password resets and security are more difficult.

It may conflict with MYOB's intended user management." (really?)

I will be interested to see MYOB's response to your query.

Earl,

Any suggestions on how we are going to handle a business environment where there is a single MYOB workstation in a workshop environment, which is signed on to a single time in the morning by one of about 10 staff. They use the workshop MYOB signon, then check the workshop email to get the 2FA code. 

If we use passkey, or SMS - which one of the 10 staff's personal phones should we use - and what happens when that particular person is not on shift or at work when someone in the workshop needs to sign into MYOB. (Please don't even consider suggesting that we set up different MYOB signons for every staff member - they don't have individual email accounts)

This does not seem to be a well thought through change - that continues to cater to a diverse set of business environments. Does MYOB even consult its business users before making these sort of changes ?

Thanks,

David

Thanks, Earl, for simply repeating what was already stated in your original notice.

Your comments about understanding your clients' frustrations ring hollow when MYOB's actions suggest otherwise. From my perspective, MYOB appears to make decisions without any genuine regard for the impact they have on the businesses that rely on your services.

A response that merely restates the original position does nothing to address the concerns that were raised or demonstrate that customer feedback is being taken seriously.

Hi UEA,

Thanks for sharing this so clearly. We understand why this feels frustrating, especially when email verification has worked well for your business for a long time.

This change is part of a broader move to strengthen account security, as email verification is more vulnerable to phishing and unauthorised access than the other available sign-in methods. From 1 September 2026, email verification will no longer be available through 2FA reset, and it will be phased out for existing users in 2027 Email 2FA is being removed. Here’s how to stay ahead of it.
A passkey is one of the new sign-in options available. It lets you sign in using your device, like your fingerprint, Face ID or PIN, so there’s no password or verification code to remember. More information is available here: Signing in with a passkey.

We know changes to long-standing workflows can be disruptive, and we do appreciate you taking the time to call that out.

Regards,
Earl