Whats covered in this guide?:
Why you need 2FA
If you’re a General Manager (GM), Admin or Payroll Officer, you must set up two-factor authentication (2FA) before you can access Workforce. Your role lets you see other employees’ personal and pay data, so your account needs an extra layer of protection.
With 2FA on, you log in with two things:
Your password
A 6-digit verification code from an authenticator app (or, as a backup, sent to your email)
This makes it much harder for anyone else to get into your account, even if they know your password.
Before you start
You need an authenticator app to generate your codes. Install one before you begin:
Google Authenticator (iOS or Android)
Microsoft Authenticator (iOS or Android)
No smartphone? You can use a browser-based authenticator instead, such as the Authenticator extension for Chrome. It scans the QR code and generates codes the same way a phone app does.
Also check that your phone or computer is set to update its date and time automatically. 2FA codes are time-based and fail if your clock is off.
Enable Two-Factor Authentication (2FA)
To enable 2FA in Workforce:
Log in to your Workforce account.
Navigate to My Profile.
Select Enable Two-Factor Authentication.
Download an authenticator app if you do not already have one installed.
Recommended apps include:
Google Authenticator
Microsoft Authenticator
Scan the QR code displayed on screen using your authenticator app.
Enter the 6-digit verification code generated by the app.
Select Enable to complete setup.
You will see a message confirming that you have enabled two-factor authentication, along with the option to disable it in the future if necessary.
Once enabled, Workforce will require a verification code whenever you log in on desktop or mobile.
Important: Keep your authenticator app installed on your device. If you lose access to the app, you may need to manually reconfigure authentication.
Log In With Two-Factor Authentication
After entering your username and password, Workforce will prompt you to enter a 6-digit verification code.
To log in:
Open your authenticator app.
Locate the Workforce verification code.
Enter the code into Workforce before it expires.
Select Log In.
Verification codes refresh every 30 seconds.
Once successfully authenticated, you may not be prompted again for up to 24 hours on the same device.
Troubleshoot Setup Issues
If you receive an error such as:
“Invalid code”
“There were problems verifying your code”
Try the following steps:
Log out of Workforce.
Remove the Workforce account from your authenticator app.
Log back in.
Repeat the setup process.
If the issue continues:
Clear your browser cookies/cache
Try another browser
Ensure your device time settings are set to automatic/synchronised
If You Cannot Access Your Authenticator App
If you no longer have access to your authenticator app or mobile device, you can request a verification code via email.
To receive a code by email:
Enter your username and password as usual.
On the verification screen, select: The app isn’t working, email me a verification code.
Check your inbox for the code.
Enter the code to complete login.
Email verification codes are valid for a limited time. For security, enter the code as soon as you receive it.
Regenerate Your QR Code
If you need to reconnect your authenticator app:
Log in using email verification.
Navigate to My Profile.
Disable Two-Factor Authentication.
Re-enable 2FA by following the setup steps again.
A new QR code will be generated during setup.
Common Login Issues
Expired Verification Code
Authenticator codes refresh every 30 seconds.
If your code expires before submission:
Wait for a new code to generate.
Enter the new code immediately.
Incorrect Device Time
2FA relies on accurate device time.
Ensure:
Your phone and computer clocks are synchronised
Automatic date/time settings are enabled
Use Email Verification
When verifying by email:
Codes are valid for a limited time and should be entered as soon as possible
A new code can be requested if the previous one expires
If verification continues failing:
Request a new code
Check spam/junk folders
Confirm your email address is correct
Use 2FA Without a Smartphone?
You can still use 2FA without a mobile device.
Desktop/browser-based authenticator tools are also supported.
These tools can scan the QR code and generate verification codes the same way as a mobile app.
FAQs
I’ve lost my phone or can’t open my authenticator app.
I’ve lost my phone or can’t open my authenticator app.
Contact Workforce.com support and ask them to reset your two-factor authentication. For security, your organisation’s admins can’t do this for you.
Once support has reset it:
Log in with your email and password.
If you’re an admin, General Manager, Payroll Officer or Partner, you’ll be asked to set up 2FA again. If you aren’t asked, go to My Profile and click Enable two factor authentication.
Click Setup authentication and scan the new QR code with an authenticator app on your new or recovered phone.
Enter the 6-digit code to finish.
Tip: If you’re replacing your phone, move your authenticator app to the new phone before you reset or hand in the old one. That way you won’t get locked out.
I’m getting a new phone.
I’m getting a new phone.
Move your authenticator app to the new phone before you reset or hand in the old one. Most apps have a transfer or backup option, such as Transfer accounts in Google Authenticator.
You can also set it up fresh while you still have your old phone:
Log in to Workforce.com.
Go to My Profile and click Disable two factor authentication. You’ll need a code from your old phone.
Click Enable two factor authentication, then Setup authentication.
Scan the new QR code with your new phone and enter the 6-digit code.
I’ve lost my phone or can’t open my authenticator app.
I’ve lost my phone or can’t open my authenticator app.
Contact Workforce.com support and ask them to reset your two-factor authentication. For security, your organisation’s admins can’t do this for you.
Once support has reset it:
Log in with your email and password.
If you’re an admin, General Manager, Payroll Officer or Partner, you’ll be asked to set up 2FA again. If you aren’t asked, go to My Profile and click Enable two factor authentication.
Click Setup authentication and scan the new QR code with an authenticator app on your new or recovered phone.
Enter the 6-digit code to finish.
“Invalid code” or “There were some problems verifying your code” during setup
“Invalid code” or “There were some problems verifying your code” during setup
Log out of Workforce.com.
Delete the Workforce.com entry from your authenticator app:
iOS: tap the pencil icon in the top right, select Workforce.com, then tap Delete.
Android: press and hold the Workforce.com entry until the delete option appears.
Log back in and set up 2FA again.
My codes keep getting rejected at login.
My codes keep getting rejected at login.
Codes depend on the time, so:
Enter the code before it changes. Each code lasts 30 seconds.
Check that your phone’s date and time are set automatically.
In Google Authenticator on Android, tap ⋮ > Settings > Time correction for codes > Sync now. This only changes the app’s internal clock, not your phone’s time settings.
“Remember me” isn’t working.
“Remember me” isn’t working.
Remember me only works on the same computer and browser, and it lasts 30 days. You’ll be asked for a code again if you:
use a different browser or computer
clear your cookies or have cookies turned off
use private browsing
change internet connection
had someone else log in on the same browser
I don’t have a smartphone.
I don’t have a smartphone.
Install a browser-based authenticator, such as the Authenticator extension for Chrome. Use it to scan the QR code during setup, then use it to get your login codes.