Two-step sign-in: an extra lock on your account.
Your SignAndGo account can send documents in your name and open everything your team has sent. A password alone is one lock. Two-step sign-in adds a second, so someone who has guessed or stolen the password still cannot get in.
How it works
With two-step sign-in on, logging in takes your password plus a short code from an authenticator app on your phone. The code changes every 30 seconds, so a code that leaks is useless almost at once. Only someone holding both your password and your phone gets through.
Turning it on
Open your account's security settings and choose to set up two-step sign-in. You will see a code to scan with an authenticator app. Scan it, type the code the app shows to confirm everything matches, and you are done. From then on, each time you log in you are asked for a fresh code.
It is optional, and you choose it for your own account. It takes about a minute.
- Have an authenticator app installed on your phone first.
- Scan the setup code from your security settings.
- Enter the code the app shows to finish.
- Keep the phone handy the next time you log in.
Who should turn it on first
Anyone who can see a lot should go first: workspace admins, the people who send the most envelopes, and anyone who handles documents with personal details such as onboarding packs or client financial statements. After that, it is worth asking the whole team to follow.
Remember that a workspace account can see documents sent by colleagues as well as your own, depending on the access you have been given. One weak password can expose far more than one person's envelopes.
A practical approach in a small office is to set it up together at a team meeting, so nobody is left stuck at the setup screen on their own.
What it does not change
Two-step sign-in protects the accounts of people who send and manage documents. The people you send documents to are not affected: signers still open their secure link and sign with no account and no code. You add protection for your team without adding a step for your clients.
If you change phones
Move your authenticator app across before you wipe the old phone, or set two-step sign-in up again on the new one from your security settings. If you are locked out, contact us at sign@signandgo.com.au and we will help once we have confirmed it is you.
Common questions
- Do my signers need two-step sign-in?
- No. It is for your team's accounts. Signers use their secure link as usual.
- Is two-step sign-in compulsory?
- No. It is optional, and each person can turn it on for their own account.
- Which authenticator apps work?
- Any standard authenticator app that reads a setup code and shows a six-digit code.