2 Factor Authenication - Email Back up codes

[Joycekitchens]

We are having issues with 2 Factor Authentication.  We do not want to use phones as they are private for employees and have discovered that Email authentication does not come with backup codes which means if the user does not have email access (e.g. work email not accessible, working overseas) they cannot obtain access to MYOB.

MYOB help desk has advised that only options is to create another email and change MYOB access but this is not convenient for the user or use phone option but this is also not suitable especially if working overseas.

If phone can have backup codes why not email??

[Neil_M]

HI @Joycekitchens

Welcome to the MYOB Community Forum, I hope you find it a great resource

The app based 2FA authentication system allows you to download backup codes as a safeguard for if your device is lost or misplaced. Unlike the app-based system, backup codes cannot be generated or used. This is because the email based 2FA system is designed on the assumption that you do have access to the email setup during the process.

To think of it another way, if the authentication was based solely on your phone and this phone was lost then you cannot access any online services without recovering the codes. In contrast its generally not possible to lose an email address, as these can often be accessed through other means