Set up two-step verification (2FA)
Two-step verification (2FA) means you sign in with your password and one more check. The extra check is usually a tap or a 6-digit code on your phone. It takes about 5 minutes to set up. You only do it once.
Why do I have to do this?
Your account can show private data, like your payslip, bank details or customer data. A password alone is easy to steal. With 2FA, a stolen password is not enough to open your account.
Who decides that I need 2FA?
The application you use, or your employer or organisation, sets the rule. Applications with sensitive data, like f.ex. payroll, often require 2FA.
If you see a Remind me later button, 2FA is optional for you. You can set it up later.
If there is no Remind me later button, 2FA is required. You must set it up to continue.
Questions about the rule? Contact your employer or the administrator of the application.
What you need
A smartphone with an authenticator app, or one of the other options in the table below.
About 5 minutes.
A safe place to save a recovery code (a password manager, or printed paper).
Choose your situation
Your situation | Go to |
|---|---|
I have a smartphone and a computer | Option A or Option B below |
I already use Google Authenticator, Microsoft Authenticator or another app | Option B below |
I only have my phone (no computer), or only one device | |
I do not have a smartphone | |
Something does not work |
Not sure which app to pick? Watch the short videos in the 2FA Gallery & Method Guide.
Step 1: Connect an authenticator app
Choose Option A or Option B. You only need one.
Option A: Visma Authenticator (recommended)
With Visma Authenticator you do not type codes. You tap Approve on your phone when you login. The app is free.
On your phone, install Visma Authenticator from the App Store or Google Play. You can also scan the first QR code on your computer screen to find it.
Open the app. When the phone asks, tap Allow for notifications. Without this, you will not see sign-in requests (you can also later allow this from your phone settings).
On your computer, click Next. A second QR code appears.
In the app, tap Add account, then Scan QR code. Point the camera at the QR code on your computer.
Check the short code (for example "YLUI"). It must be the same on your phone and on your computer. If it is the same, click Accept on your computer. If it is different, click Deny.
Keep the app open on your phone until the computer says the setup is done.
Watch how to set up Visma Authenticator (video):
Cannot scan the QR code? In the app, tap Input key and type the "Account secret key" shown under the QR code. More help.
Next: go to Step 2: Add a backup phone number.
Option B: Google Authenticator, Microsoft Authenticator or another app
Any authenticator app that makes 6-digit codes works. The app shows a new code every 30 seconds.
On your computer, click I use a different Authenticator app or choose to use another authenticator option on the screen.
Open your authenticator app on your phone and add a new account. Scan the QR code on your computer.
Cannot scan? Choose "enter a setup key" in your app. Copy the secret key from the screen. Do not add spaces.
Your app now shows a 6-digit code for Visma. Type it on your computer and click Next.
Code not accepted? Your phone's clock is probably wrong. Set the time to automatic in your phone settings, then try again with a new code.
Next: go to Step 2: Add a backup phone number.
Step 2: Add a backup phone number (only if asked)
Some applications ask for a phone number during setup. Others do not. The application you use decides this. If you do not see this step, go to Step 3.
The phone number is a backup. If your authenticator app does not work, for example because you lost access to it, you can get a code by text message (SMS). SMS cannot be your only 2FA method.
Choose your country code and type your phone number. Click Next.
Type the 6-digit code from the text message. Click Next.
You also do not see this step if your account already has a phone number. You can add or change phone numbers at any time in Account Settings.
Step 3: Save your recovery code
At the end you get a one-time emergency code. It is the only way to sign in if you lose your phone and cannot get an SMS.
Copy the code. Save it in a password manager, or print it and keep it safe.
Tick I have safely copied and stored this code.
Click Next.
Done. You will now get a 2FA check when you sign in. On your own computer you can tick "remember this device". Then you are asked about once every 30 days. How signing in with 2FA works.