MFA is an additional layer of security for your Wave account. Having MFA set up helps verify your identity if you’re having trouble logging in and adds additional protection from unauthorized access.
When you turn on MFA, you will be prompted to enter a short verification code when you sign in to your Wave account, after entering your password. You can choose to receive this code by text to your mobile number, or through an authenticator app. This verifies that it is you logging in.
Never share this verification code with anyone else.
Turn on multi-factor authentication
Turn off multi-factor authentication
Turn on multi-factor authentication
Multi-factor authentication can only be set up in the web browser version of Wave.
- At the top right corner, click your business name, then click Profile Settings.
-
In the Profile menu, click Password and security.
To switch your authenticator methods, first click Turn off next to your active method, then click Turn off… to confirm.
- Click Set up authenticator app or Set up phone number.
- If using the app, scan the QR code that appears using the third-party authentication app on your mobile device. If using your phone number, enter your number.
- Click Continue.
- Enter the six-digit verification code shown in your authenticator app into Wave and click Continue.
- Click Copy keys or Download (.txt file) to save your emergency recovery keys.
- Enter a recovery key to test it and click Continue.
- Click Done.
If you lose access to your third-party authenticator app or mobile device, you will need an emergency recovery key to sign into your Wave account.
You will receive a confirmation email, and see an Active label and the date you began using MFA under the MFA sign-in method you chose.
If you’re having trouble setting up or using MFA, contact support.
Once MFA is active, it applies to all businesses that you own or collaborate on, however, collaborators on accounts you own don’t need to activate MFA to access your business.
Generate new recovery keys
If you lose your saved emergency recovery keys, you can generate a new set in your Wave account:
- At the top right corner, click your business name, then click Profile Settings.
- In the Profile menu, click Password and security.
- Click Generate new recovery keys. Nine new recovery keys will generate in a
pop-up window. - Click Copy keys or Download (.txt file) to save your new recovery keys.
When you generate new recovery keys, your previous recovery keys will no longer be valid.
Turn off multi-factor authentication
Multi-factor authentication cannot be turned off if you use payroll. Wave is currently rolling out MFA enforcement for online payments users. Once enabled for your account, you will be unable to turn it off.
If you aren’t using payroll, MFA can be turned off at any time. To turn off MFA:
- Click your business name in the top right corner, then click Profile Settings.
- In the Profile menu, click Password and security.
- Click Turn off next to your active method.
- Click Turn off… in the pop-up to confirm.
You will now see an Inactive label under the MFA sign-in method you chose. To reactivate MFA, follow the steps above under Turn on multi-factor authentication again.
Download an authenticator app
If you don’t have an authenticator app and aren’t sure where to start, popular choices include Google Authenticator and Microsoft Authenticator. Both can be downloaded from your phone's App Store.
Google Authenticator
Download Google Authenticator:
- For Android, visit the Google Play Store
- For iOS, visit the Apple App Store.
For help setting up or using Google Authenticator on your device, see Google Account Help: Get verification codes with Google Authenticator.
Desktop browser authenticator
Download an authenticator app extension for Google Chrome through the Chrome web store.
Microsoft Authenticator
Download Microsoft Authenticator:
- For Android, visit the Google Play Store
- For iOS, visit the Apple App Store
For help with app setup on your device, see Microsoft Support.