MYOB DROPPING OUT
What the heck is going on with all the dropping out and having to get an authorization number again. I just completed an invoice, go to print it and bam... it's gone for good ! So frikking annoying...
Forum Discussion
Hi janjac , the 24 hour 2FA was a regulatory change that MYOB needed to meet, rather than just a decision that we made. I understand that it is frustrating to re-authenticate regularly.
There are 2 things that we are currently working to address though and hope to be able to release solutions soon.
- Losing work in progress when prompted for 2FA
- We hope to have the fix for this in place soon
- Timing of the prompt
- Right now, if you signed in and were prompted for 2FA at 11:30 am, then the next day, you would be prompted again at 11:30 (24 hours)
This becomes a pain however if you happened to start your day at 9am and could lose work - We want to see if it is possible to implement a change that means the '24 hour' prompt instead happens on the first login of the day. This would double as a way to ensure that user dont have work in progress as well.
- Right now, if you signed in and were prompted for 2FA at 11:30 am, then the next day, you would be prompted again at 11:30 (24 hours)
Watch this space, we are working hard to make it better.
Cheers, Mike
I agree this is very frustrating getting kicked out mid use. also why are the only options for 2fa codes by App and text message, they both require a mobile phone, what about email a password option for (try another method?) when you dont have a phone?
Morning NTD , hope you had a good weekend.
Email is currently not being offered for an additional method for a few reasons.
It is much less secure, more prone to errors and has been used incorrectly by many people.
Email addresses are easier to gain access to, and once someone has access to the email they can then receive 2FA codes. Emails themselves can also be intercepted along their delivery chain.
They are prone to errors due to things like having the emails moved to a junk or spam folder, some legacy emails like hotmail can have trouble with sending or receiving.
And one of the biggest ones is that emails are commonly shared among businesses. If a company had a generic 'reception@business.com' email that was accessed by multiple staff then an individual persons 2FA code going to an email that multiple people have access to is not secure.
Authenticator apps and SMS help to reduce any concerns around shared logins and also provide a more secure option for receiving 2FA.
I believe there are options for having a desktop authenticator app, this might be something you could look into as an alternative.
Thanks, Mike
