Use two-factor authentication (2FA) to log in to Wave

Two-factor authentication, or 2FA, is an additional layer of security for your Wave account. 2FA helps verify your identity during login and prevents unauthorized access to your information.

When 2FA is turned on, you are prompted to enter a one-time verification code each time you sign in to your Wave account. You can choose to receive this code by text to your mobile number or through an authenticator app. This verifies that it is you logging in.

Never share this verification code with others.

Turn on two-factor authentication in your web browser

Turn on two-factor authentication in the Wave mobile app

Download an authenticator app

Frequently asked questions

Turn on two-factor authentication in your web browser

  1. At the top right corner, click your business name, then click Profile Settings.
  2. In the Profile menu, click Password & Security.

    To switch authenticator methods, next to your active method, click Turn off, then click Turn off… to confirm.

  3. Click Set up authenticator app or Set up phone number.
  4. If using an app, scan the QR code using the third-party authentication app. If using your phone number, enter your number.
  5. Click Continue.
  6. Enter the six-digit verification code you received, via text message or from your authenticator app, into Wave and click Continue.
  7. Wave creates your recovery keys, then lists them in the next pop-up window. To save your keys, click Download (.txt file).

    You can use a recovery key to log in to your Wave account if you're having trouble receiving a verification code. Each key can only be used once. Never share any of these keys with others.

  8. Click Done.

You will receive a confirmation email, and see an Active label under your chosen 2FA sign-in method.

If you’re having trouble setting up or using 2FA, contact support.

Turn on two-factor authentication in the Wave mobile app

Currently, you can only set up 2FA through the mobile app if your account location is Canada.

  1. In the top-right corner, tap More.
  2. Tap the General tab.
  3. Tap Two-factor authentication. You'll be taken to Wave in your mobile web browser.
  4. To choose an authentication method, tap Authenticator app or Phone number.
  5. If using an app, tap Manually enter setup key, or scan the QR code using the third-party authentication app. If using your phone number, enter your number.
  6. Tap Continue.
  7. Enter the six-digit verification code you received, via text message or from your authenticator app, into Wave and tap Continue.
  8. Wave creates your recovery keys, then lists them in the next pop-up window. To save your keys, tap Download (.txt file).

    You can use a recovery key to log in to your Wave account if you're having trouble receiving a verification code. Each key can only be used once. Never share any of these keys with others.

  9. Tap Done.

You will receive a confirmation email, and see an On label next to Two-factor authentication.

If you’re having trouble setting up or using 2FA, contact support.

Download an authenticator app

Authenticator apps generate a one-time verification code that you can use in addition to a password.

If you don’t have an authenticator app, popular choices include Google Authenticator and Microsoft Authenticator. Both can be downloaded from your phone's App Store.

Google Authenticator

Download Google Authenticator:

For help setting up Google Authenticator on your device, see Google Account Help: Get verification codes with Google Authenticator.

Desktop browser authenticator

Download an authenticator app extension for Google Chrome through the Chrome web store.

Microsoft Authenticator

Download Microsoft Authenticator:

For help with app setup on your device, see Microsoft Support: How to add your accounts to Microsoft Authenticator.

Frequently asked questions

How can I troubleshoot issues with my authenticator app?

For help troubleshooting Microsoft Authenticator, see Microsoft Support: Troubleshoot problems with Microsoft Authenticator.

For help troubleshooting Google Authenticator, see Google Account Help: Fix common issues with 2-Step Verification.

What if multiple people share the same login for my Wave account?

2FA codes can only be sent to one device, using one method, at a time.

To protect your account’s security, Wave does not recommend that multiple people use the same login credentials.

If multiple people need access to your Wave account, you can add them as collaborators. This allows them to use their own Wave account and login credentials to access your account.

Do collaborators need to set up 2FA?

Collaborators on accounts you own don’t need to activate 2FA to access your business, unless they have payroll management access.

They can set up 2FA on their own devices if they choose.

Where is the code I need to sign in?

You can find the code in the authenticator app you downloaded or in a text you received. To update your phone number, follow the steps in Update your phone number for two-factor authentication (2FA).