Xero Verify 4+

For Xero to REQUIRE 2FA is awful. Look at all these reviews. 2FA has not been perfected and is incredibly invasive. I don’t want to give you my phone number. You don’t need to install an app on my phone. To increase the “security” to my account you need to invade more of my privacy? Get real. How about you take the burden of security OFF of the consumer and secure your freaking assets? Don’t make it my job to go through the hassle of 2FA and invade my privacy because you’re worried about getting hacked. Do your job.

A compromise is allowing 2FA for those who want it and for those who don’t, allowing a simple password. It’s a PASSWORD for a reason. I’ll assume a burden. But not the 2FA burden and burden of risk to my privacy. I’ll assume to burden of if my password is compromised that’s on me, not Xero. This is ridiculous. Do better Xero.

Thanks for leaving a review. This is more about enabling MFA as opposed to the functionality of the app. The app has 2 functions, to send you push notifications as well as generate 6 digit codes in case you are not in a wifi enabled area.
If you are receiving push notifications (which is the fastest way to login to Xero), then the app is working as expected. The sole purpose of the app is to verify you as a legitimate user of Xero and provide access to your account.

A have a remote accountant and now she can’t log in. We have we have tried to sync it up so she can call me and put in the password it sends to my phone but that isn’t working either. She would need my email too? This is the most useless thing no one wanted. Still trying to figure out how to log her in remotely with no luck so far.

Why even give the option to turn this off? When you turn it off, the next time you log in, it just forces you to set it up again before you can do anything within the program?!

So as every other reviewer has mentioned, this is insane dumb to force MFA for users. It should be up to them if they want that extra blanket of security.

Thanks for leaving a review. It’s the first rule of security: “never share your passwords with anyone!” Not even your boss, accountant or bookkeeper, no-one. With Xero, there are no limits on the number of users you can invite into an organisation or client file. We suggest inviting new users instead of sharing your login credentials. Please visit Xero Central for a step by step guide and search 'add a new user to your organisation' so there's an audit trail of access and data changes.

It is ridiculous to force multi-factor identification. It’s a bad look for me to be constantly checking my phone each time I’m trying to do my job. Also, heaven forbid I chose to leave my phone at home during the work day to remove distractions and increase productivity. This is now impossible thanks to your careless, flawed, and authoritarian implementation of MFA.

Let the costumer set the security level they’re comfortable with instead of dictating something that’s arduous to them. This forced feature is trash.

And don’t say it’s for my own protection. I don’t want this feature. Period.

Thanks for leaving a review. There are other ways to log into Xero, using your backup email or the security questions, so if you don't have your phone handy, you'll always be able to log in to Xero.