--- title: Xero Two-Step Authentication description: Xero requires all payroll admin users to setup two-step authentication, providing an additional layer of security. We explain what Xero two-step authentication is, and how to set it up for your Xero small business payroll. image: https://www.eyeonbooks.com.au/hubfs/Thumbnail2SAinXero.png --- # Xero Two-Step Authentication [XERO](https://www.eyeonbooks.com.au/eye-on-blog/tag/xero) [Payroll](https://www.eyeonbooks.com.au/eye-on-blog/tag/payroll) [How-To](https://www.eyeonbooks.com.au/eye-on-blog/tag/how-to) [ Eye on Books ](https://www.eyeonbooks.com.au/eye-on-blog/author/eye-on-books) 09 September 2018 --- **INTRODUCTION:** As a payroll admin user in Xero you have access to a lot of very personal information of your employees.  Information that's very attractive to hackers for identity theft crimes. Two-step authentication (2SA) provides an extra level of security by requiring your usual email address and password, AND a unique code generated from an app on your smartphone which changes every 30 seconds or so. This way even if your password is compromised by an attack, they'll still be unable to access your Xero account and more importantly your employee payroll data. ** Find out more & how to setup 2SA for your Xero business.** We've prepared a list of must-know information to get you going.  - [Security questions and alternative email](https://www.eyeonbooks.com.au/eye-on-blog/xero-two-step-authentication#Security-Questions) - [Install an authenticator app](https://www.eyeonbooks.com.au/eye-on-blog/xero-two-step-authentication#Install-App) - [Set up two-step authentication in Xero](https://www.eyeonbooks.com.au/eye-on-blog/xero-two-step-authentication#Setup-2SA) - [Add an alternative email address](https://www.eyeonbooks.com.au/eye-on-blog/xero-two-step-authentication#Alternative-Email) - [Turn off two-step authentication](https://www.eyeonbooks.com.au/eye-on-blog/xero-two-step-authentication#Turn-off-2SA)   To make things even easier, check out our video tutorial below;   --- ## Security questions and alternative email There may be times you don't have access to your authentication device (mobile phone at home, or out of battery), so you can still log in using a different method.  Either answer a few security questions that only you know, or get a one-off authority code from an alternative email address You must setup security questions when setting up 2SA, but the alternative email address is optional.  If you do setup the alternative email address, you'll be given the option of using either the security questions or the alternative email, if you don't have your authentication device. The alternative email address can NOT be the same as your Xero logon email address!!   ## Install an authenticator app The first thing you'll need to do is download an authenticator app on your smartphone.  As of the date of this blog, the easiest to use is the **[GOOGLE AUTHENTICATOR](https://support.google.com/accounts/answer/1066447?co=GENIE.Platform%3DAndroid&hl=en) **app. Google Authenticator is available for download from both **[ITUNES ](http://appstore.com/googleauthenticator)**and **[GOOGLE PLAY](https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2)**.  Simply click below for your required device and the link will take you straight to the app.   [![Appstore Logo](https://www.eyeonbooks.com.au/hs-fs/hubfs/Appstore%20Logo.png?width=200&name=Appstore%20Logo.png)](http://appstore.com/googleauthenticator)             [![GooglePlaystore Logo](https://www.eyeonbooks.com.au/hs-fs/hubfs/gotripps-google-android-567793-edited.png?width=171&name=gotripps-google-android-567793-edited.png)](https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2) Then follow the installation instructions provided for your device to add an account.   ## Set up two-step authentication 1. When you next login to Xero, it may ask you to setup 2SA.  Click on **SET UP 2SA NOW** 2. Xero will display a qcode barcode on the screen.  Open your authentication app on your smartphone, and select **ADD ACCOUNT** to create a new account on your authentication app. 3. Hold your phone up to the screen so the app can scan your barcode.  Once successful, the app will then display a unique 6 digit code. 4. Enter this code back into Xero. 5. Select your three security questions and type answers, then click **NEXT** 6. Enter an alternative email address (see below), or click **NOT NOW** 7. Click **DONE**   ## Add an alternative email address You can also add an alternative email address during the setup process. 1. Enter your alternative email address and click **SEND CODE** 2. Check your email, and note down the six-digit code sent to your alternative email address 3. Return to the setup screen in Xero and enter the code and click **CONFIRM EMAIL** 4. Click **FINISH**   ## turn off two-step authentication If you're not a payroll admin, you may still have the ability to **TURN OFF** two-step authentication if you wish.  To do this; 1. Login to Xero 2. Go to YOUR NAME up the top right of Xero and click **ACCOUNT** 3. Under **TWO STEP AUTHENTICATION**, click **DISABLE** 4. Enter the six-digit code generated by your authentication app 5. Click **DISABLE** You can uninstall the app from your mobile device as well after successfully disabling two-step authentication in Xero   --- If you get stuck, and can't manage to get Two-Step Authentication in Xero working, don't hesitate to [contact us](https://www.eyeonbooks.com.au/contact-us), and we'll be able to help you in any situation.   ---