Sharing logins in Timely is not secure and can create issues when setting up multi-factor authentication (MFA). In this guide, you’ll learn why each Timely user should have their own login, how shared logins can impact security and permissions, and what to do for administrators and part-time staff.
Getting part-time staff and administrators set up correctly is easy, and this should not impact your billing. We’re here to help!
Important note: all Timely users should have their own login, including part-time staff and administrators such as bookkeepers or receptionists. MFA requires users to have their own login, so account owners should ensure everyone has their own login before MFA setup.
Why shared logins aren’t recommended in Timely
Sharing logins is not a safe or secure practice when using Timely. Multiple people using the same email address and password means your account is easier to compromise.
Shared passwords are more likely to be written down, sent by text, or reused, making them more vulnerable and easier to steal.
Shared logins can also create complications within your Timely account. You won’t be able to see what each person does in Timely, change permissions for each person, or track things like bookings, client records, payments and more.
If a staff member or administrator using a shared login leaves the business, the only way to remove their access is to change the email address and password linked to that login.
Why shared logins won’t work with MFA
Multi-factor authentication (MFA) requires each person to verify their identity.
If staff are sharing a login and MFA is required (for example, when someone has logged out and needs to log back in, or when 30 days have passed since the last verification), the six-digit code will be sent to the authenticator app or email inbox linked to that login.
If the person trying to log in does not have access to that authenticator app or email inbox, they will be locked out of Timely.
Important note: shared logins can cause issues when MFA is required.
For example, if multiple people use the same login and one person sets up MFA using their own phone or email address, anyone else using that login may not be able to sign in when MFA is required. This is because the six-digit verification code will be sent to that person’s authenticator app or email inbox.
Setting up administrators
If you have an administrator who does not require their own bookable row in Timely, but does require a login, you can set them up as an administrator user, at no additional cost.
To add an administrator, follow the steps in our guide How to add an administrator to your account.
Setting up part-time staff
Part-time staff should also have their own login.
If you need help setting them up or have questions about billing, please contact our Support team.
Timely tip: setting up individual logins before MFA is required will help make the transition smoother and ensure everyone can securely access Timely when verifying their identity.