Skip to main content

Why am I being asked to set up an Authenticator app when logging in?

Written by Dan C
Updated this week

Buildxact uses modern, passwordless login methods by default to keep accounts secure and easy to access. In most cases, you won’t need to set up an authenticator app at all.

However, there are a few situations where we’ll require Multi-Factor Authentication (MFA) for added security.

How logging in normally works

Buildxact (Web App)

For most users, the default login method is Email Code:

  1. Enter your email address

  2. Receive a one-time code by email

  3. Enter the code

  4. You’re logged in

Buildxact Go (Mobile App)

For Buildxact Go users, the default login method is SMS Code:

  1. Enter your mobile number

  2. Receive a one-time code by SMS

  3. Enter the code

  4. You’re logged in

For the majority of users, this is the only login method you’ll ever need.


When MFA is required

You’ll be asked to set up MFA (also called 2-Step Authentication) if any of the following apply:

1. You choose to set up a password

Passwords on their own aren’t very secure — they’re often reused and commonly appear in data breaches.
If you choose to use a password, we require MFA to add an extra layer of protection.

2. You’re logging into a Buildxact account connected to Xero

Xero requires MFA for all integration partners. If your Buildxact tenant is connected to Xero, MFA is mandatory to meet their compliance requirements. If you wish to disable MFA, you must first disconnect the Xero integration from your Buildxact account. This can be done via the Integrations page in Buildxact. Once the Xero integration is disconnected, you will have the option to turn off MFA for your account.

3. You manually enable 2-Step Authentication in My Profile

Some users prefer the extra security. If you turn this on yourself, MFA will be enforced on future logins.


What happens when MFA is enabled?

After completing your main login step (Email Code, Password, or SMS Code), you’ll be prompted to complete a second step:

  • If you have a verified phone number A one-time code will be sent to your phone via SMS.

  • If your primary login already uses SMS (e.g. Buildxact Go users) The MFA code will be sent by email instead.

  • If you don’t have a verified phone number You’ll be shown a QR code and asked to set up an authenticator app (such as Google Authenticator, Microsoft Authenticator, or similar), click for more info on authenticator apps. If you are unable to access your account due to MFA issues, you can reset your MFA setup. This allows you to reconfigure your authenticator app or choose an alternative MFA method supported by the login flow. Contact Buildxact support if you need assistance with resetting your MFA.

Once MFA is set up, you’ll only be prompted when required — not every time you log in. If you need to manage or reset your MFA settings, you can do so by contacting Buildxact support or using the available options in your account settings. This includes reconfiguring your authenticator app or updating your recovery options.


Still need help?

If you’re unsure why MFA is being required for your account, or you’re stuck setting it up, our support team can help. Ensure that your authenticator app is correctly configured and synced with your account. If you lose access to your authenticator app, use backup codes (if available) or contact Buildxact support for assistance. Always keep your recovery options up to date to avoid being locked out of your account.


Did this answer your question?