Require or allow skipping the authenticator
Choose whether everyone in your firm signs in with an authenticator app, and why we recommend requiring it.
Who can do this: admins
Your firm decides whether everyone signs in with an authenticator app, or each person chooses for themselves. You pick this when you create the firm, and an admin can change it at any time.
Steps
-
Open the menu with your name in the top bar and choose Settings, then Account and security.
-
Find Authenticator app, below your own Authenticators. Only admins see it.
Authenticator app on Account and security, with Everyone uses an authenticator app chosen and marked Recommended, and Save. -
Choose Everyone uses an authenticator app or The authenticator app is optional.
-
Choose Save. A confirmation says what will change.
-
Choose Require it or Make it optional. You'll see "Saved".
The Make the authenticator app optional? confirmation, with Make it optional and Cancel.
Good to know
- We recommend leaving it on. Everyone uses an authenticator app is marked Recommended: "It protects client tax data if a password leaks." With it optional, the app says: "A password alone is easier to steal. We recommend requiring it for firms that handle tax returns."
- When you require it, anyone without an authenticator is asked to set one up at their next sign-in, and can't use Sidesheet until they do. The confirmation says how many people that is.
- When you make it optional, every admin in your firm is emailed about the change.
- With it optional, anyone who has set one up still needs it at every sign-in. Each person can set one up from Authenticators with Turn on.
- An admin can still reset someone's authenticator either way.
If something goes wrong
- "The setting was saved, but an email to an admin didn't send. Tell your other admins." The change is saved. Let your other admins know yourself.
- "Could not save the setting. Try again." Nothing changed. Try again.
- "Only firm admins can change this." Your role may have changed. Ask an admin.