Introduction
Multifactor Authentication (MFA) adds an extra layer of security to your Xero account by requiring both your password and a verification code during login. This helps protect your business data from unauthorised access, phishing attempts, and compromised passwords. Xero requires MFA for all users, so setting it up ensures your account remains compliant and secure.
How to Set Up Xero Multifactor Authentication
Step 1: Log in to your Xero account using your email and password.
Step 2: To access MFA Setup:
New users: MFA setup will appear automatically. Click Set up multi-factor authentication.
Existing users: Click your profile at the top-right, select Account.
Then under Multi-factor authentication, click Set up
Step 3: Choose your preferred authentication method:
Xero Verify (recommended).
Third-party authenticator app (such as Google Authenticator, or Microsoft Authenticator).
Xero Verify App
Step 1: Select Use Xero Verify on the MFA setup screen.
Step 2: On your mobile device, open the App Store.
Step 3: Search for Xero Verify and install the app.
Step 4: Open Xero Verify, click on ‘+’ at the top, then choose Scan QR code.
Step 5: Scan the QR code displayed on your Xero setup page. Then click Continue.
Step 6: Your MFA setup using Xero Verify is now complete.
Authenticator App
Step 1: Install an authenticator app such as Google Authenticator, or Microsoft Authentication. In this example, we’ll demonstrate using Google Authenticator.
Step 2: In the app, click on ‘+’ at the bottom. Then choose Scan a QR code.
Step 3: Scan the QR code displayed on your Xero setup page. Then click Enter Code.
Step 4: Enter the 6-digit verification code generated by the app into Xero.
Step 5: Your MFA setup using a third-party authenticator app is complete.
Frequently Asked Questions (FAQs) about Xero Multifactor Authentication
Q: Do I have to use MFA in Xero?
A: Yes. Xero requires MFA for all users to enhance account security and meet global cybersecurity standards.
Q: Which authenticator apps can I use?
A: Popular options include Google Authenticator, Authy, LastPass Authenticator, and Microsoft Authenticator.
Q: What if I lose my phone?
A: You can use your backup email, recovery questions, or contact your Xero admin to reset your MFA settings.
Q: Can I disable MFA?
A: No. Xero requires MFA and does not allow users to turn it off.
Q: Does MFA apply to Xero Mobile App?
A: Yes. You’ll need to enter your verification code when signing in on any device.
Conclusion
Setting up MFA in Xero strengthens your account security by requiring a second layer of verification at login. The process is quick, works with any standard authenticator app, and provides protection against unauthorised access. While MFA is not specific to Malaysia’s e-Invoicing changes, keeping your account secure ensures that only authorised users can access sensitive financial and e-Invoice data.