Use multi-factor authentication (MFA) to log in to Wave

MFA is being added gradually beginning July 4, 2024. We expect all Wave accounts to have MFA within a few weeks.

You must have a third-party app such as Google Authentication or Microsoft Authenticator downloaded on your mobile device to use MFA.

Turn on multi-factor authentication

Generate new recovery keys

Turn off multi-factor authentication

Download apps

Turn on multi-factor authentication

Multi-factor authentication can only be set up in the web browser version of Wave. You must have a password for your Wave account to turn on MFA. Learn how to Create a password for your account if you signed up with Google.

When you activate MFA, you will be prompted to enter a verification code and your password when you sign in to your Wave account.

        1. Log in to your Wave account at waveapps.com.
        2. Click your business name in the top right corner, then click Profile Settings.
        3. In the Profile menu, click Password and security.
        4. Click Set up authenticator app.
        5. Scan the QR code that appears using the third-party authentication app on your mobile device.
        6. Enter the six-digit verification code on your mobile device into Wave and click Continue.
        7. Click Copy keys or Download (.txt file) to save your emergency recovery keys.

If you lose access to your third-party authenticator app, you will need an emergency recovery key to sign into your Wave account.

        1. Enter a recovery key to test it and click Continue.
        2. Click Done.

You will see an Active label under Sign-in with authenticator app and the date you began using MFA.

Once MFA is active, it applies to all businesses that you own or collaborate on, however, collaborators on accounts you own don’t need to activate MFA to access your business.

Generate new recovery keys

If you lose your saved emergency recovery keys, you can generate a new set in your
Wave account:

        1. Log in to your Wave account at waveapps.com.
        2. Click your business name in the top right corner, then click Profile Settings.
        3. In the Profile menu, click Password and security.
        4. Click Generate new recovery keys. Nine new recovery keys will generate in a
          pop-up window.
        5. Click Copy keys or Download (.txt file) to save your new recovery keys.

When you generate new recovery keys, your previous recovery keys will no longer
be valid.

Turn off multi-factor authentication

Multi-factor authentication is an optional feature that can be turned off at any time. To turn off MFA:

        1. Log in to your Wave account at waveapps.com.
        2. Click your business name in the top right corner, then click Profile Settings.
        3. In the Profile menu, click Password and security.
        4. Click Deactivate authenticator app.
        5. Click Yes, deactivate authenticator app.

You will now see an Inactive label under Sign-in with authenticator app. To reactivate MFA, see Activate multi-factor authentication.

Download apps

Two-step authentication with Wave requires the use of an authenticator app. You can use the authenticator app of your choice.

If you don’t have an authenticator app and aren’t sure where to start, popular choices include Google Authenticator and Microsoft Authenticator. Both can be downloaded from your phone's App Store.

Google Authenticator

Download Google Authenticator:

For help setting up or using Google Authenticator on your device, see Google Account Help: Get verification codes with Google Authenticator.

Microsoft Authenticator

Download Microsoft Authenticator:

For help with app setup on your device, see Microsoft Support.