Multi-factor authentication (MFA) in Timely – Timely

Multi-factor authentication (MFA) adds an extra layer of security when logging in to Timely by asking you to verify your identity every 30 days. This helps protect your business data, financial information and client information, including sensitive personal and financial details.

In this guide, you’ll learn why Timely is introducing MFA, who needs to set it up and how to verify your identity using an authenticator app or email. For more information, please see our Frequently asked questions (FAQs): Multi-factor authentication (MFA) guide.

Important note: Timely will be rolling out multi-factor authentication (MFA) to users in stages throughout October and November 2026. If you’re notified that MFA is available for your account, we recommend setting it up before your enforcement date.

Why is Timely introducing MFA?

Keeping your business and client data safe is more important than ever. Fraud attacks are increasing and becoming more sophisticated, including through the use of AI.

MFA helps to:

Keep your core business data and financial information safe.
Protect your client data, including sensitive personal and financial information.
Safeguard your business reputation and client relationships.
Prevent unauthorised access to your Timely account if your email and password combination is exposed.

What is MFA?

Multi-factor authentication (MFA) means using more than one way to verify your identity.

For Timely, MFA verification options are:

An authenticator app, such as Google Authenticator.
Email verification.

MFA is an additional security check after you enter your email and password when logging in. You’ll need to enter a six-digit code generated by your authenticator app or sent to your Timely login email address.

Once you set up MFA, you’ll use a one-time passcode to confirm it’s you logging into Timely. You’ll need to verify your identity this way every 30 days.

Who needs to set up MFA?

Over time, two-factor authentication (MFA) will become mandatory for most Timely users. This includes most account owners and staff members, regardless of their permission level.

If you receive an email or in-app notification from Timely asking you to set up MFA, you’ll have two weeks to complete the setup. After this period, you’ll be logged out of Timely and will need to set up MFA before you can log back in.

Timely tip: for larger businesses, make sure all staff members have completed their MFA setup. We also recommend ensuring part-time staff and administrators, such as receptionists or bookkeepers, have their own Timely login.

MFA eligibility

MFA is being rolled out to Timely users in stages. If you’re eligible, you’ll be notified by email and in Timely.

Account owners and staff: if you’re eligible to set up MFA, you’ll be required to complete MFA setup regardless of your permission level.
Users with SMS 2FA: if you’re already using SMS 2FA, you won’t be able to set up MFA using an authenticator app or email right now. Continue using SMS 2FA.
Xero users: Xero users are required to use SMS 2FA. If you use Xero, you won’t be able to use Timely’s new MFA setup yet.
PIN-only users: You won't need to set-up MFA if your account is PIN-only. If a PIN-only account later changes to add the ability to log in with email and password, you'll need to configure MFA at the time of this change.

Timely tips: if you're the Timely account owner, here are a few tips for getting your team set up on MFA as smoothly as possible.

Set up your own MFA first: We recommend that you complete your own MFA setup first. This will mean you understand the process and can help your team if they get stuck.

Update old email addresses: If you or your team need to update their email addresses, do this prior to everyone setting up MFA.

Shared logins: If you currently have team members sharing a Timely login, each person will need their own login to set up MFA. This includes casual staff and admin-only staff, such as receptionists or accountants. Find out more here.

How to set up MFA with an authenticator app

The safest and fastest way to set up MFA is by using an authenticator app, such as Google Authenticator.

1 Go to Login and security. If you’re using the TImely iOS or Android app, you can find this option by heading to More then Settings.

2 Under Multi-Factor Authentication (MFA), click Set up to get started.

3 You’ll be prompted to set up an Authenticator app. We recommend Google Authenticator, but you can use another authenticator app if you prefer. Click Continue.

4 Download your authenticator app, then log in or create an account. Select the option to scan the QR code.

5 If you cannot scan the QR code, select Copy setup key and paste it into your authenticator app.

6 Once you have scanned the QR code or entered the setup key, your authenticator app will generate a six-digit code. Enter this into the Verification code field and click Verify.

7 After verifying, you can choose to set up email verification as well or skip this step.

8 Once setup is complete, you’ll see a confirmation message saying “Your account is now protected with Multi-Factor Authentication.”

9 When you return to Login and security, you’ll see that your account has been verified using an Authenticator app.

How to set up MFA with email verification

1 Go to Login and security.

2 Under Multi-Factor Authentication (MFA), click Set up to get started.

3 If you only want to verify using email and do not want to set up an authenticator app, click Set up later instead of Continue.

4 A verification email will automatically be sent to your Timely login email address.

Important note: if you want to send the verification email to a different email address, you’ll need to update your Timely login email address and restart the MFA setup process.

5 Open your email inbox, find the six-digit code and enter it into the Verification code field. Click Verify.

6 Open your email inbox, find the six-digit code and enter it into the Verification code field. Click Verify.

7 Once setup is complete, you’ll see a confirmation message saying “Your account is now protected with Multi-Factor Authentication.”

8 When you return to Login and security, you’ll see that your account has been verified using an Authenticator app.

Can’t find the email from Timely with your six-digit verification code? Check your junk inbox and spam filters to see if it ended up there. If you still can’t find it, check that Timely isn’t blocked in your email account. If you are still stuck, we recommend using an Authenticator app instead or contacting the Timely support team.

How to reset MFA

You can reset your authenticator app or email verification methods individually, by following these steps:

1 Go to Login and security.

2 Click Reset next to the MFA method you want to reset.

3 This will remove that MFA method from your account and log you out.

4 If MFA is not yet mandatory for you (for example, you’re still within the two-week setup period), you can log back in using your email and password without setting up MFA again.

5 If MFA is mandatory for you (for example, you’re past your MFA enforcement date), you’ll need to set up MFA again before logging back in to Timely.

Important note: only account owners or staff members with admin level permissions can reset MFA. If you are the account owner and are locked out, please contact support.

How to reset MFA for another user

Account owners and admins can reset MFA for another user within their account.

1 Go to Staff access.

2 Click the three dots next to the user you want to reset MFA for.

3 Select Reset MFA.

4 You’ll see a confirmation screen that the user’s MFA has been reset. Click Reset again to apply the change.

5 The user will be logged out immediately.

6 If MFA is not yet mandatory for the user, they can log back in using their email and password without setting up MFA again.

7 If MFA is mandatory for the user, they’ll need to set up MFA again before logging back in to Timely.

How to verify with MFA every 30 days

Every 30 days, you’ll need to verify your identity using your chosen authentication method, by following these steps:

1 Enter the 6-digit code from your authenticator app or email inbox.

2 Once your identity has been verified, you’ll be logged into Timely.