Better manage authentication on web browser using private tabs
I log into Xero (employee) from a desktop running Firefox in a private window (NoScrip, Addblock, Ghostery disabled for Xero).
There are no cookies available to the session, so it always looks like a new device.
Xero asks for authentication via the Xero app on my mobile (real 2-factor in this scenario).
Once logged in, in this manner, some sections still are not happy (review payslips) and want another confirmation. In this case via email.
I'm not sure what window this 3rd factor is closing.
If the mobile authenticator is secure, this 3rd factor should not be required.
If I am on the desktop of a customer, I have access to their email; this 3rd factor is not a secure authentication.
George Tzanatos
shared this idea
Hi 👋 your idea is being looked into by our Community team. We'll be in touch soon to update you once your idea has been reviewed.
Did you know you can join our Xero Research panel to be involved in early testing and research? Find out more and sign up through our website 🙂
