Set up two-step authentication

Increase your security when signing in to Xero with two-step authentication. To set this up you’ll need to install an authenticator app on your mobile device and then link it to your Xero account. Each user in your organization will need to set up two-step authentication individually.

Install an authenticator app

Download and install the relevant authenticator app for your device, then follow the installation instructions provided for your device to add an account.

For mobile devices:

For Windows computers:

  • The latest stable download of WinAuth, and select Google as the authenticator type (WinAuth website)

    Image of the WinAuth installer with the Google option highlighted

You may also need to install a barcode scanner app, so you can scan the QR code in Xero.

Set up two-step authentication in Xero

  1. Go to [Your Name], then click Account.

    Image showing the Account link under the user's name

  2. Under Two-step authentication, click Setup.

  3. Open the authenticator app on your mobile device and scan the QR code in Xero.

  4. You can also enter your secret key manually and add these details to your authenticator app. Make sure you turn on Time-based if you're using manual entry.
  5. Click Next.

  6. Enter the authentication code provided by your authenticator app into Xero, then click Next.

  7. Select your three security questions and type answers, then click Next.

    The security questions can be used as a backup if you don't have your device or the code is not working.

  8. Click Done.

The next time you log in to Xero, you'll need to enter your authentication code in addition to your email address and password.

You might also be interested in

Learn more