Enable Multi-factor authentication (MFA)

As an additional security measure, you can enable multi-factor authentication (MFA). MFA requires users to enter a second form of verification in addition to their password when logging in.

Before you begin

When you log into your account, a pop-up will appear to prompt you to begin the set up process.

There are two options for MFA: authenticator apps or passkeys.

How to set up multi-factor authentication with an authenticator app

An authenticator app is a third-party app, such as Google Authenticator or Authy, that generates time-based one-time passwords.

1. Download and install an authenticator app on your device.
2. In UK Payroll, select Google Authenticator or similar.
3. Open the app on your device and scan the QR code displayed on the UK Payroll MFA set up pop-up.
4. Enter the verification code generated by the app into the UK Payroll MFA set up pop-up to verify and complete the set up.

How to set up multi-factor authentication with passkeys

Passkeys are digital credentials that are tied to a specific user account, and allow users to sign into services without entering a password.

1. Ensure your device has a passkey registered.
2. In UK Payroll, select Security Key > Use security key.
3. Enter the Security key name and click Continue.
4. Follow the instructions on your device to enable passkeys for UK Payroll.

How to use a recovery code

After you set up MFA, you’ll receive a recovery code. This code can be used to access your account if you lose access to your MFA device. Save this code in a secure location, separate from your MFA device.

1. At Verify Your Identity, click Try another method.
2. Select Recovery code.
3. Enter the recovery code and click Continue.

FAQs

What is multi-factor authentication?
Multi-factor authentication (MFA) is a security system that requires more than one method of authentication to verify the user's identity when logging into an account.

Why is MFA important?
By requiring a second form of verification, MFA makes it much more difficult for unauthorised users to gain access to your account, even if they have your password. This is super important, especially when dealing with sensitive employee data.

What happens if I lose access to my MFA device?
If you lose access to the device that you have setup MFA with, you can use your recovery code to login and then setup MFA again with a new device. When saving your recovery code, make sure it is accessible outside of your MFA device.

I’m having an issue with my Authenticator app.
Check that you're using the correct code. If you have access to multiple entities in UK Payroll, with separate logins, you will need to set up a separate MFA process for each of the logins. Make sure you name each one so you can easily identify which authenticator code you should be using.

I’m having an issue with my passkey.
Ensure your device supports passkeys and that they are properly set up.