Frequently asked questions about 2-Factor Authentication.
Important: If you use Single Sign On (SSO) to login to your Dext account you do not need to enable 2FA.
- What is 2-factor authentication?
- Why are we requesting users to set up 2FA?
- How are we rolling out 2FA for existing users?
- Can I disable 2FA once I’ve set it up?
- Entered code is invalid?
- What is a backup code?
- What happens if I change my mobile device?
- Will I need to enter a verification code each time I log in?
- I don’t have a smartphone, what am I meant to do?
- Where can I find information on how to set 2FA up?
What is 2-factor authentication?
Two-factor authentication (2FA) is an extra layer of security used to protect your account at Dext.
When you log in, you’ll need to enter your username and password along with a time-based verification code.
Why are we requesting users to set up 2FA?
We’re enhancing our security which will give you an extra layer beyond your password! From October 14th, 2FA will become mandatory for users with accounts integrated with Xero, and will gradually be rolled out to all accounts over time.
How are we rolling out 2FA for existing users?
We’ll be rolling 2FA out in phases. We’ll be asking all our accounting partners and clients who integrate with Xero to set their 2FA up in the first phase. Clients using other accounting software will be required to enable 2FA at a later stage.
Can I disable 2FA once I’ve set it up?
Once enforced on an account level, the 2FA cannot be disabled. Every user who is part of the account needs to have it set up and use it for login to protect access to their data at Dext.
If your account is still not enforced, you can enable the 2FA to check how it works and disable it if you want. Keep in mind that you can configure your account to ask for 2FA only once per month.
If you need to remove the enforcement on your account for some reason, please contact our Support team to help you.
Entered code is invalid?
The codes are valid for up to 30 seconds. You need to ensure you enter it within that time.
If you entered the code within 30 seconds and it is still invalid, please make sure that you are using your device’s automatic time settings, and try again.
If you use Google Authenticator, you don’t need to change the settings on your device. Follow the steps below to make the app use Google Services to generate your verification codes. This will not change the time settings on your device!
- Open Settings from the app menu
- Choose Time correction for codes
- Choose Sync now and confirm the action
If you use another app, you may want to switch to another alternative from the sections below.
What is a backup code?
When setting up your 2FA, you’ll be given a list of backup codes. You’ll be able to use these backup codes to log into your Dext account if you no longer have access to your authenticator app or mobile device.
We’d recommend storing your backup codes somewhere safe so you can refer back to them if you need them.
What happens if I change my mobile device?
If you change your mobile device, you can download the authenticator app onto your new mobile device.
Alternatively, if you’re transferring your apps from one device to another, you can transfer your authenticator app across to your new device.
Will I need to enter a verification code each time I log in?
When logging into your account and entering your verification code, you can select Don’t ask me for the code for 30 days. This will keep your account authenticated for the next 30 days on the device that you currently use.
Please keep in mind that if you use another device, another browser, or even the Incognito mode of your current browser, we will still ask for the verification code.
I don’t have a smartphone, what am I meant to do?
If you don’t have a smartphone, you can have verification codes sent to your email address. The steps to do this are outlined in this article.
Alternatively, you can download a desktop app such as 1Password to generate your verification codes. The downside to this approach is that you will be able to access your account only if you have access to the app. This means that if you access Dext from multiple devices, you will need to get a verification code from the device on which the authentication app is installed.
Another alternative is installing a browser extension (plugin) if you normally use Dext from a single device:
- Chrome extension – Authenticator app
- Microsoft Edge plugin – Authenticator: 2FA Client – Microsoft Edge Addons
- Mozilla Firefox plugin – Authenticator app
Where can I find information on how to set 2FA up?
We have a dedicated article on setting up your 2FA. You can find it here.