2-Step Verification, also known as two-factor authentication (2FA), adds an extra layer of security to your Small Improvements account. In addition to your password, you’ll enter a verification code from an authenticator app. This helps protect your account even if someone else gets your password.
This article explains how to require 2-Step Verification, what users can expect during setup, and how to reset it when needed. New setups use an authenticator app. SMS verification is only available to users who already have it configured.
New setups: authenticator app
If 2-Step Verification is required for your account, you’ll be prompted to set up an authenticator app the next time you log in. Enter your username and password, then follow the on-screen instructions to complete setup.
SMS verification is no longer available for new setups.
Require 2-Step Verification for an individual user
Go to People > Company, open the employee's dropdown menu, and select Password & Security.
Alternatively, open the employee’s profile, click Manage, and select Password & Security.
Enable Require 2-Step Verification. If the employee hasn’t already configured it, they’ll be prompted to set up an authenticator app the next time they log in.
Require 2-Step Verification for all users
Go to Settings > Security. You can require 2-Step Verification for all admin users, all non-admin users, or both.
Save your changes. Users who haven’t set up 2-Step Verification will be prompted to configure an authenticator app the next time they log in.
These requirements also apply to future users in the selected groups.
Resetting 2-Step Verification
If a user loses access to their authenticator app or the phone number used for SMS verification, an admin can reset their setup.
Go to People > Company, open the employee's dropdown menu, and select Password & Security. Alternatively, open the employee’s profile, click Manage, and select Password & Security.
Click Reset 2-Step Verification. The user will be prompted to set up an authenticator app the next time they log in, even if they previously used SMS verification.
Existing SMS users
If you already have SMS verification configured, you’ll receive a verification code on your mobile phone when verification is required. Enter the code to complete login.
In this legacy SMS flow, your device is remembered for 30 days. Each new device or browser requires verification. This helps prevent unauthorized access even if someone else gets your password.
