2-Step Login Setup

How do I set up 2-Step Login in my BambooHR account?

Purpose: If 2-Step Login is required, this help guide will show you how to set up this feature.


2-Step Login

Required

When the 2-Step Login requirement is first enabled at your company, you will receive a notification the next time you log in to your account. This notification will let you know how many days you have to set up your verification method. 

To start setting up a verification method, click Setup Now. If you prefer to set it up later, click Not Yet to continue access to BambooHR. 

A new modal will appear once you click Setup Now. From here, you can start setting up your preferred verification method. Once set up, you can choose a second method or use backup recovery codes. See below for information on how to set up each verification method. 

To manage your 2-Step Login settings, click on your profile photo in the top right corner of your BambooHR account and select 2-Step Login from the dropdown menu. If your company requires 2-Step Login, you will be able to reset your verification method, but you will not be able to disable the feature. 

If you need to update or manage your verification method after setting it up, you can do so by navigating to your profile photo and selecting 2-Step Login from the dropdown menu.

Self-setup

If 2-Step Login is not required at your company, you can opt into using 2-Step Login by setting it up in your account.

To set up 2-Step Login, log in to BambooHR and click on your profile photo in the top right corner. Click 2-Step Login from the dropdown menu to continue. From here, you can set up and manage your 2-Step Login settings. For more information on how to set up each method, see below

If you set up more than one verification method, you can choose a preferred method by clicking Manage > Set as Preferred. In this dropdown menu, you can also reset or disable the verification method.

Mobile-only users: If your company requires 2-Step Login, mobile users will need to log in to BambooHR through a web browser or mobile browser to set it up. After setting it up, they can log in to BambooHR through the app and provide the code from their selected verification method.


Verification methods

Text message (SMS)

If you are using SMS as your verification method, you must have the following mobile app versions or newer:

  • BambooHR iOS 4.3.8
  • BambooHR Android 4.2.6
  • BambooHR Hiring App iOS & Android 1.6.6

Once you click Set Up for the Text Message (SMS) verification method, a modal will appear for you to enter your phone number. You must fill out the Country Code and Phone Number fields. 

Click Send Code to receive your authentication code and move on to the next step. 

After you receive your code via SMS, enter the six-digit code in the Phone Number Verification modal. If you do not receive a code, click Resend Code and try again. It may take up to five minutes to receive another code. 

Please note that if you click Trust this device, the system will remember your device for the next six months, meaning you will not have to use 2-Step Login on your device during this timeframe. After the six months, you will need to enter a new code.

Clicking Continue will bring you back to the page where you can choose to set up a backup verification method or log in to BambooHR. 

Authenticator app

If choosing the Authenticator App verification method, a modal will show you instructions on how to download an authenticator app and enter the verification code. If you do not have an authenticator app and would like to use Google Authenticator, click on iOS or Android (blue links shown in the screenshot above). Or, you can search for an authenticator app of your preference in your mobile app store. 2-Step Login will work with any authenticator app.

Authenticator app setup

After downloading your preferred authenticator app, follow the instructions below: 

  1. Open the authenticator app and tap to add a new authenticator.
  2. You have the option to scan the QR code or enter the code manually.
  3. Once you scan the QR code or enter the code, you will see a six-digit code associated with your BambooHR login credentials. This code will automatically change every 30 seconds.

In BambooHR, click Next to enter the authenticator app code.

If you are using a mobile device, you will not be able to set up 2-Step Login by scanning the QR code. Click here to learn how you can navigate this process.

Enter the six-digit code from the authentication app. You can mark the box if you would like the system to remember your computer for six months. After six months, we will ask for another code. Please note that if you log in to your account on another device, you will need to enter a new code.

Click Continue to set up another verification method (if needed) and log in to your BambooHR account. 

If you attempt to authenticate with a code too many times without success, you will get locked out for 30 minutes.

What if I am setting up 2-Step Login through the web browser on my mobile device?

If you set up 2-Step Login through a web browser on your mobile device, you will not be able to scan the QR code. Instead, tap Enter Code Manually.

This action will open a modal with a 10-digit code you can use to set up the authenticator app. You will likely need to turn your device to landscape mode to see the complete code.

In the authenticator app, tap to add a new authenticator and select Manual entry. Enter your account email address and add the 10-digit passcode for the key.

Once you set up the authenticator, you will need to enter the new six-digit passcode in BambooHR through your web browser to log in to your account.

Backup recovery codes

After setting up your first verification method, you can use backup codes as your second verification method. Click Get Codes for a list of backup codes. If you lose your phone with the authenticator app or do not have access to your phone, the backup codes are available for use. You have the option to download or print your backup codes and store them in a safe place.

After you use a backup code to log in to your account, a strikethrough will appear on the code, and you cannot use it anymore. You can generate new codes if you have lost them or believe they are compromised. Click Ok, Got It to return and log in to BambooHR. 

You can access your backup codes by clicking on your profile photo in the top right corner when logging in to your BambooHR account. Click View 2-Step Login Backup Codes.