Skip to content
← Share and support customer ideas for Xero

Settings and activity

1 result found

  1. Login - Remember 'Trust this device' setting for MFA after 24 hours

    24 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    22 comments  ·  Users & setup » Login  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close
    Gaining Support  ·  AdminKelly Munro (Community Manager, Xero) responded

    Hi team, we appreciate the added support this idea has received.

    We have recently shipped a new login experience and want you to know defaulting this checkbox was considered but for now isn't a functionality we've been able to work in.

    We'll continue reviewing this as we consider future improvements like more user control. If there's any progress I'll let you know, here. Thanks

    Koti Karthick Kumar Vankayala supported this idea  · 
    An error occurred while saving the comment
    Koti Karthick Kumar Vankayala commented  · 

    I work as a senior Identity and Access management consultant. And my recommendations are below,
    1. If a user checks the box - trust my device then trust the device and skip MFA for next login
    2. If the duration of next login is more than 3 days ideally considering the weekend, ask for MFA again else keep skipping the MFA. This is like Idle time in the login behaviour.
    3. Consider refreshing MFA every 30 days. This means even if the user is regularly logging in force them to MFA after 30 days. This is max MFA duration.

    I can provide clearer instruction if required.

    Cheers.