Skip to content
← Share and support customer ideas for Xero

Security & support

Customer ideas for Xero support, security, billing and privacy

Learn about the forums, how to contribute and create a good idea on Xero Central

Security & support

Categories

Enter your idea

(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback

1 result found

  1. Better manage authentication on web browser using private tabs

    I log into Xero (employee) from a desktop running Firefox in a private window (NoScrip, Addblock, Ghostery disabled for Xero).

    There are no cookies available to the session, so it always looks like a new device.

    Xero asks for authentication via the Xero app on my mobile (real 2-factor in this scenario).

    Once logged in, in this manner, some sections still are not happy (review payslips) and want another confirmation. In this case via email.

    I'm not sure what window this 3rd factor is closing.

    If the mobile authenticator is secure, this 3rd factor should not be required.
    If I…

    1 vote

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    0 comments  ·  Security  ·  Admin →
    Feedback  ·  AdminDavid Reynolds (Admin, Xero) responded

    Hi George, thanks for reaching out and sharing your feedback with us!

    It sounds like your second login attempt may have been flagged as suspicious. To help keep your financial data secure, we generally don't recommend being logged into two different Xero accounts at the same time on the same device.

    When a login is flagged as suspicious, certain features within Xero can become temporarily unavailable until you verify the login attempt. This is usually completed by clicking a verification link sent to your email.

    Please check your inbox (as well as spam/junk folders) to see if a verification email was sent.

    If you're still having trouble or need additional help, please raise a support case with our team so we can take a closer look for you.

  • Don't see your idea?