Turning OFF 2 Factor login

[Daz152]

Accountright has FORCED 2 factor login which is totally inappropriate.

I need to disable this completely otherwise I have to open my email up for everyone for when I'm not here.

So far this morning its sent 3 codes to simply login.  Luckily I called in early so the place was able to fire up the accounting.

How do we turn off this useless, time consuming, and insecure feature?

[Neil_M]

Hi @Daz152

Two Factor authentication has been made mandatory due to changing industry standards, and as mandated by the ATO. As this has been made mandatory it is not possible to disable it. In terms of the 2FA login processes there are two options, email based 2FA and app based 2FA.

If you had multiple users needing to access the company file, then each user should have their own unique email address, which would have their own unique 2FA. This would allow each user to access the company file independently and wouldn’t need access to your email address.

Alternatively you can set your 2FA login to use an app based method which wouldn’t require you to access your emails at all to retrieve the code. Instead the code is generated by an app on your smart phone.

[Daz152]

If we had registered users for everyone who needs to lookup or get info from our accountright file we would need at least 10+ accounts. Unpracticle when much of the stuff required is simple lookup of customer data.

Emails can take 3 to 5 minutes to receive and again phone apps are not viable.

I've had 2 phone calls this morning from users not able to login so we've had to instigate that the main user login and keep the system logged in all day for everybody to use.  Including customers, general workes and anyone else who happens to wander by.  Real secure!? 

Anyway, it appears to be the way of our current paranoid world.

As with others clients we may need to shift back to in house systems that suit.

Thanks anyway.

[Geoff_]

Also a problem I have come across is that the theory was when you use the 2 factor authentication you were only supposed to log in every 30 days

Why do I have log in evrery day?

[Haydes]

Hi @Geoff_

I've seen this happen for a few different reasons, there was a post made on a different thread about this here: 2FA AccountRight (desktop) keeps asking for a verification code after ticking "trust device for 30 ...

Some Users were able to get this working without any problems when using the Email method of 2FA and some have been able to get it working using this support note: Trust this device for 30 days

That said, our Development Teams have identified an issue that would be causing the cookie to expire prematurely and they are working on developing a fix on their end to resolve this error. We will be making a post on that thread with updates, feel free to click the Subscribe button in the top right of that forum to get notifications.

[DrGraeme]

I absolutley agree.  I was given 10 backup codes 5 days ago, so i could get in but now i have used all of these and cannot get into my own account.  This is wrong and i am seriously considering ZERO Accounting software.  This is my second business using MYOB and i am over this rubbish that is impossed upon us.

As i am an early starter (6am) and i now have to wait till 9am to get help.  Wrong MYOB..... it is time you started to listed to your comments, they are positive if you bother to look and listen.  PLease MYOB you have me email address so some help would be good.

[Steven_M]

Hi @DrGraeme

Two-factor authentication backup codes tend to only be required when you don't have access to verification device or email account at the time of the request. Ideally, these should not be used as a general login, as there is a limited number of codes available for each login.

If you are using your backup codes for general use, I would be reviewing the authentication method and seeing if device or email authentication may be better suited to your needs.

[CHE13]

I agree with Daz.  It's a total nuisance!  I am still waiting to start work in MYOB. I have been trying now for 40 mins to receive an email for authentication code (yes, I've checked junk mail).  So, I am ringing up MYOB support and they tell me I have a 30 min wait period .... really!  Employ more people for the busy periods MYOB!  I feel like we're being held to ransom ... very unprofessional!  I do not agree we should put your app on our private phones, when we're at work. 

[Steven_M]

Hi @CHE13

As mentioned on Unable to receive two-factor authentication (2FA) emails we currently are aware of the fact that some clients are not able to receive their two-factor authentication verification codes via email. Our team are currently looking into the situation to resolve it as soon as possible.

[KathyTB]

Xero is now requiring 2FA as well.  Perhaps the ATO is mandating this for all online accounting software, or it's considered to be 'best practise'. I currently have three software systems on my Authenticator app and I'm expecting at least one more.