Two-step verification (2FA) protects your user account. You sign in with your password and one more check, usually on your phone. If someone steals your password, they still cannot open your account.
If you sign in with a passkey instead of a password, you do not need 2FA.
Start here
I want to… | Read this |
|---|---|
Set up 2FA now | |
Set up 2FA, but I only have one device | |
Set up 2FA, but I do not have a smartphone | |
Fix a problem with setup | |
Sign in with 2FA, or I lost my phone | |
Watch a setup video |
Who decides if I need 2FA?
Your organisation or the application you use decides. Applications with sensitive data, like payroll, often require 2FA. If 2FA is not required, you can still turn it on yourself in Account Settings.
You set up 2FA once. It then works for all Visma applications you use with the same account.
Which methods can I use?
Method | How it works | Good for |
|---|---|---|
Visma Authenticator (recommended) | Tap Approve on your phone. No typing. | Most people. Fastest. |
Other authenticator app | Type a 6-digit code from an app like Google or Microsoft Authenticator. The code changes every 30 seconds. | People who already use one of these apps. |
Security key or passkey | Use a USB key (like a YubiKey), or Face ID, Touch ID or Windows Hello. | People who do not want to use a phone. The strongest protection. |
SMS (backup only) | Get a 6-digit code by text message. The code works for 5 minutes. | Only when your app does not work. SMS cannot be your only method. |
Why is SMS only a backup? Text messages are less safe. A criminal can trick a phone company into moving your phone number to a new SIM card. Then they get your codes.
Remembering this device for 30 Days
When you sign in, you can tick "remember this device". Then you are asked for 2FA on that device only about once every 30 days. Use this only on your own computer, not on a shared or public one. If you clear your browser cookies or change browser, you are asked again.
One-time emergency code
At the end of setup you get a one-time emergency code. Save it in a password manager, or print it and keep it safe. It is your way in if you lose your phone and cannot get an SMS. How to use the emergency code.