MYOB 2FA options are changing (again!!!)
I received this email from MYOB today. "We’re updating two-factor authentication (2FA) options to help strengthen account security. From 1 September 2026, 2FA email verification will not be avai...
Forum Discussion
Earl,
Any suggestions on how we are going to handle a business environment where there is a single MYOB workstation in a workshop environment, which is signed on to a single time in the morning by one of about 10 staff. They use the workshop MYOB signon, then check the workshop email to get the 2FA code.
If we use passkey, or SMS - which one of the 10 staff's personal phones should we use - and what happens when that particular person is not on shift or at work when someone in the workshop needs to sign into MYOB. (Please don't even consider suggesting that we set up different MYOB signons for every staff member - they don't have individual email accounts)
This does not seem to be a well thought through change - that continues to cater to a diverse set of business environments. Does MYOB even consult its business users before making these sort of changes ?
Thanks,
David
Hi Hydro-Tech,
Thanks for sharing your thoughts on this. I can see why some workflows do not sit well with this change.
You’re right that passkeys and SMS are a much better fit for individual logins than shared ones.
If email 2FA is already being used, it will not stop straight away. But going forward, the direction is moving away from email codes and toward passkeys or app-based 2FA.
That does make things harder for businesses using one shared login, so your concerns are fair.
Regards,
GenreveHi David,
We are in the same situation. I have asked this question before and was told that everyone has to have their own email addresses to log on to MYOB. We all use the one business email address which has served us well for years. This was MYOB's response:
"Each person who signs in is expected to have their own unique MYOB login, which is tied to an individual email address. Multiple users sharing the same email address for separate logins is typically not supported. (even though it has been supported for at least 15 years)
That said, if everyone is literally sharing one MYOB user account (same email and password), it may work in some situations, (in my experience it has worked in all situations)but it isn't recommended because:
You can't reliably see who made changes.
Audit trails and approvals become less useful.
Password resets and security are more difficult.
It may conflict with MYOB's intended user management." (really?)
I will be interested to see MYOB's response to your query.
