Most data breaches do not start with a sophisticated attack but with a stolen or guessed password. The same password for email, an online shop and your business system, and one leak is all it takes. Yet your business system holds customer contacts, addresses, invoices and bank account numbers: data you are responsible for under GDPR.
What two-factor sign-in is
After your password the system asks for a one-time code that only you have: either in an authenticator app on your phone (Google Authenticator, Microsoft Authenticator and similar) or sent to you by email. Someone who knows only the password gets no further.
How to switch it on in Homeearly
- Click your avatar in the menu and open Account security.
- Choose an authenticator app (scan the QR code) or a code by email.
- Save your 10 backup codes in case you lose your phone. Each works only once.
Done. Next time you sign in you enter your password and the code.
What if I lose my phone?
Sign in with a backup code and generate new ones. If you have neither your phone nor backup codes, the owner or team admin can switch two-factor sign-in off for you under Team, and you set it up again.
Protection against guessing
- 5 attempts to enter the code per sign-in.
- After 10 wrong codes the account is locked for 15 minutes.
- An app code cannot be used twice.
- Backup codes are stored only as a hash, never in readable form.
A tip for teams
Recommend two-factor sign-in especially to colleagues with access to invoices and settings. With roles and permissions (owner, office, worker), everyone also sees only what they need for their work. More on the Overviews and settings page.
Try Homeearly for free
Signing up takes a minute: 30 days free with every feature, no credit card and no commitment.