Skip to main content

Why am I being asked to set up an Authenticator app when logging in?

Dan C avatar
Written by Dan C
Updated over a week ago

Buildxact uses modern, passwordless login methods by default to keep accounts secure and easy to access. In most cases, you won’t need to set up an authenticator app at all.

However, there are a few situations where we’ll require Multi-Factor Authentication (MFA) for added security.

How logging in normally works

Buildxact (Web App)

For most users, the default login method is Email Code:

  1. Enter your email address

  2. Receive a one-time code by email

  3. Enter the code

  4. You’re logged in

Buildxact Go (Mobile App)

For Buildxact Go users, the default login method is SMS Code:

  1. Enter your mobile number

  2. Receive a one-time code by SMS

  3. Enter the code

  4. You’re logged in

For the majority of users, this is the only login method you’ll ever need.

When MFA is required

You’ll be asked to set up MFA (also called 2-Step Authentication) if any of the following apply:

1. You choose to set up a password

Passwords on their own aren’t very secure — they’re often reused and commonly appear in data breaches.
If you choose to use a password, we require MFA to add an extra layer of protection.

2. You’re logging into a Buildxact account connected to Xero

Xero requires MFA for all integration partners.
If your Buildxact tenant is connected to Xero, MFA is mandatory to meet their compliance requirements.

3. You manually enable 2-Step Authentication in My Profile

Some users prefer the extra security. If you turn this on yourself, MFA will be enforced on future logins.

What happens when MFA is enabled?

After completing your main login step (Email Code, Password, or SMS Code), you’ll be prompted to complete a second step:

  • If you have a verified phone number
    A one-time code will be sent to your phone via SMS.

  • If your primary login already uses SMS (e.g. Buildxact Go users)
    The MFA code will be sent by email instead.

  • If you don’t have a verified phone number
    You’ll be shown a QR code and asked to set up an authenticator app (such as Google Authenticator, Microsoft Authenticator, or similar), click for more info on authenticator apps.

Once MFA is set up, you’ll only be prompted when required — not every time you log in.

Still need help?

If you’re unsure why MFA is being required for your account, or you’re stuck setting it up, our support team can help.

More info on setting up an authenticator app
Did this answer your question?