Skip to content

Two-factor authentication

Two-factor authentication asks for a six-digit code from an authenticator app each time you sign in, so a stolen password isn't enough to get into your account.

It's required for Owners and Admins, because they manage connections, settings and people. Bookkeepers and Viewers can turn it on too, and we recommend it.

Set it up

  1. Install an authenticator app on your phone, such as 1Password, Google Authenticator, Microsoft Authenticator or Authy.
  2. In Iris, go to Settings → Security and choose Enable 2FA.
  3. Scan the QR code with the app, or type in the setup key.
  4. Enter the six-digit code the app shows to confirm.
  5. Save your recovery codes somewhere safe, such as a password manager.

Signing in

After your password, Iris asks for the current code from your app. If you don't have your phone, choose use a recovery code and enter one of your saved codes. Each recovery code works once; you can create a new set in Settings → Security.

Turning it off

Bookkeepers and Viewers can turn two-factor authentication off in Settings → Security. Owners and Admins can't, while they hold that role in any organization.

If you become an Owner or Admin

If you're given the Owner or Admin role and haven't set up two-factor authentication, Iris takes you to Settings → Security to set it up before you can continue in that organization.