Login - Remember 'Trust this device' setting for MFA after 24 hours
I understand the ATO requires you to enter 2FA daily, but that doesn't mean the tickbox should uncheck itself every day.
If I tick trust this device on Monday and login using 2FA, I can then login without 2FA for 24 hours.
After that 24 hours, I need to login using 2FA again AND I have to tick the trust this device box again to get another 24 hour reprieve.
Let us tick the box or another box that will remember our choice ongoing. So each day I only have to login using 2FA again but my choice to trust that device for 24 hours is remembered.
Sam Gray
shared this idea
Hi team, we appreciate the added support this idea has received.
We have recently shipped a new login experience and want you to know defaulting this checkbox was considered but for now isn't a functionality we've been able to work in.
We'll continue reviewing this as we consider future improvements like more user control. If there's any progress I'll let you know, here. Thanks
-
Chris Clark
commented
Totally agree... I love Xero, but I absolutely HATE that I have to use 2FA every time I login. You really should allow remembering my authenticated login for a period of time (ideally around 30 days). I have many companies which have Xero accounts and all of my various teams that use Xero lose time from having to login with 2FA EVERY time. This is literally costing me thousands and thousands of dollars of productivity each year across all my companies/people using Xero.
-
Grant McQuoid
commented
Now that we have daily authentication when logging into Xero why do we have to also tick the Trust this device button - please remove that requirement its a needless click which is inefficient
I'd also recommend you challenge your development team to reduce the number of clicks to do things in Xero, at times it feels like your programme constantly requires multiple menu clicks to do things when one selection should be enough.