Account & Billing

Two-step login

Who needs it

Company Admins must use two-step login. A Company Admin can change who is an admin, see every record and log in as other people, so a stolen password on its own must not be enough. Until the code has been entered, a Company Admin's account works like no admin at all. Everyone else can turn it on from Edit Profile if they want to.

Setting it up

Install an authenticator app on your phone — Google Authenticator, Microsoft Authenticator, 1Password or Authy all work.
Company Admins are taken to the set-up screen the next time they sign in. Anyone else: open Edit Profile, then Two-step login settings, then Set up.
Scan the square code with the app. If you can't scan it, type the key shown under it into the app instead.
Type the 6-digit code the app shows and press Turn on.

Straight after, you're shown 10 backup codes. Copy or download them and keep them somewhere safe — they are shown only once, and each one works once.

Then you're asked for a backup email: a second address, different from the one you sign in with, where a code can be sent if you lose your phone. A personal address works well. We email it a link, and it only counts once you press Confirm on that link (it works for 24 hours). You can skip it and add it later from Two-step login settings.

You're asked for the code when you sign in, not while you stay signed in. Codes change every 30 seconds, so use the one on screen now.

You're always emailed when two-step login is set up or moved to a new phone, turned off, reset by a Company Admin, when a backup code is used, or when a backup email is added, removed or used. These emails can't be switched off. If you get one you didn't expect, change your password and tell your administrator straight away.

Remember this device

Tick "Remember this device for 30 days" when you type the code, and that browser won't ask again for 30 days, even after signing out. Only tick it on your own computer or phone. To undo it everywhere, open Two-step login settings and press Forget remembered devices.

New phone or lost phone

New phone, old one still working: Edit Profile, Two-step login settings, Move to a new phone. Scan the new code with the new phone; the old one stops working once the new one is confirmed.
Lost phone, backup codes to hand: on the code screen press "Lost your phone? Use a backup code". The old authenticator is removed and you set up the new phone straight away. Make new backup codes afterwards if you're running low.
Lost phone, backup email confirmed: on the code screen press "Or email a code to your backup email", then Email me a code. Type the 6-digit code from that email (it works for 15 minutes). Like a backup code, it removes the old authenticator and you set up the new phone straight away.
Lost phone, no backup codes or backup email: another Company Admin in your company opens your page in Workers and presses Reset two-step login. You'll set it up again the next time you sign in, and you'll get a notice saying it was reset.
If you are your company's only Company Admin and have no backup codes or backup email, contact Fieldtec support.
To add, change or remove the backup email: Edit Profile, Two-step login settings. You'll be asked for your 6-digit code first. A new address only replaces the old one once it's confirmed.