2-step authentication is a method to secure online accounts. Single Touch Payroll uses 2-step authentication to verify your identity before submitting data to the ATO. It requires you to know something, a password, and possess something, an authentication code created by an app installed on your mobile device, to log in.
The benefit of this approach is that even if someone guesses your password, they also need to be in possession of your mobile device to break into your account.
You will need your iOS or Android device to complete these steps.
To set up 2-step authentication:
You now have 2-step authentication set up on your mobile device to securely access Single Touch Payroll.
To use 2-step authentication:
Note: The 6-digit verification code updates every 30 seconds and is valid for two minutes. If the time expires, return to your device to get an updated code.
If you need to verify using a different device, ask your organisation administrator to cancel your existing 2-step authentication so you can set up another device.
An organisation administrator can cancel an existing 2-step authentication for an employee.
To cancel an employee's 2-step authentication:
The employee will receive an email confirming the cancellation. The employee can then set up a different device via the Single Touch Payroll menu.
If you don't have a smartphone install a Google Authenticator extension for use with the Chrome browser, such as Authy Chrome Extension. Once installed, the Google Authenticator icon displays on the Chrome toolbar. Click the icon to scan the QR code. It also displays your 6-digit google verification code.
Another option is to use an open-source authenticator for Windows, such as WinAuth.
If you are having trouble scanning the barcode, manually enter the key on your device.
Google Authenticator displays the 6-digit verification code.
If your Google Authenticator codes are not working, check that the time is synced correctly in the app:
You should now be able to use your verification code to sign in to Single Touch Payroll.
You must have an internet connection to use 2-step authentication. If your internet connection is not available you will not be able to log in to your Attaché Online organisation to enter the verification code.
If your mobile device is lost or stolen change your password immediately via My Profile in Attaché Online.
We recommend your organisation administrator cancels your 2-step authentication from your account.
You can set up Google Authenticator to generate verification codes from more than one device.
Learn how to set up 2-step authentication for Single Touch Payroll (2.15 mins video)