Multi-Factor Authentication (MFA) for QuickBooks Online Payroll

Multi-factor authentication (MFA) is a way to verify a customer's identity by sending a unique one-time code (“OTP”) to their pre-registered mobile number. 

The goal of introducing step-up/MFA is to defer fraud and product  abuse by malicious actors. Applying MFA in sensitive flows in Payroll will enhance the protection and security of our customers (employers and employees) money, sensitive data and identity.

To make your data more secure, over the next few months you’ll have to MFA, once per session, when you:

Add/Edit
 - Employee or contractor bank accounts

View/Edit
 - FEIN, SSN, or business number in Tax setup
 - Employee SSN or date of birth

View
 - SSNs or date of births in reports

How it works:
Specific sensitive employee and company information will now be masked for security. You will have a toggle to view or edit the information, but you may be required to authenticate your identity once per session to protect your company's and employees' information. To complete MFA, we will send a one-time password (OTP) to your profile's phone number, which must be entered in the on-screen prompt. Once authenticated, you can view, edit, or add sensitive information.

After your first MFA, you won’t have to do it again unless you log out or switch companies.

Alok Bapat, who manages this feature walks you through the importance of why QuickBooks is doing this, when it’s happening and how it’ll look in the product.