Verify your QuickBooks Online account with multi-factor authentication or two-step verification

In the same way that your customers and employees trust you with their information, Intuit is committed to securing your information by providing advanced security tools and systems. We want to protect your account by making sure it's really you.

In this article, you'll learn:

• What is multi-factor authentication?
• What is two-step verification?
• How to turn on two-step verification
• How to turn off two-step verification
• Why am I asked to verify my identity when two-step verification is off?

What is multi-factor authentication?

You don’t have to set anything up for multi-factor authentication. Multi-factor authentication is a security enhancement on top of the usual password requirement. When you sign in, we'll send you a one-time confirmation code through your email or mobile device. This provides extra protection against password theft.

Multi-factor authentication can’t be turned off, because it helps us protect your data and make sure you're really you. We’ll always ask you to verify your identity when you sign in to your account on a device we don’t recognize.

What is two-step verification?

You can choose to set up two-step verification for your account. Two-step verification is a setting for your Intuit Account where you need to verify, using a code sent to your mobile phone, that you're the one accessing your account. This disables the usual multi-factor authentication.

If you opt into this feature, we'll ask you to verify each time you sign in to your account. Updating the phone number connected to your Intuit Account automatically turns off two-step verification. You can turn it back on with your new number.

Turn on two-step verification

1. Sign in to your Intuit Account.
2. Select Sign in & security.
3. In the "2-step verification" section, select Turn on, then Set up.
4. Make sure your phone number is correct, then select how you want to verify your account:
   • Text message: You receive a standard six-digit verification text code.
   • Voice message: You receive an automated voice verification code in English.
5. Select Continue.
6. Enter the code we send you, then select Continue.
7. Enter your account password, then select Continue.

Turn off two-step verification

Follow these steps to disable two-step verification.

Note: If you opt out of this feature, we'll still ask you to verify the first time you sign in on an unrecognized device.

If you're using the same phone number

1. Sign in to your Intuit account.
2. Select Sign in & security.
3. Select 2-step verification.
4. Turn off the Use 2-step verification switch.
5. Enter your account password, then select Continue.

If you're using a different phone number

You'll first need to update your phone number so you can sign in to your account. Once it’s updated, you can then turn off two-step verification. To do this:

1. Complete the Email Change Request form.
   Note: Make sure to enter your new phone number in the Recovery Number field.
2. Attach a copy of any of your photo ID forms:
   1. Select Browse.
   2. Find and select the file.
   3. Select Open.
3. Once the file is uploaded, select Submit.
4. Once you receive a notification that your phone number is updated, sign in to your Intuit account.
5. From the left menu, select Sign in & security.
6. Select the 2-step verification section, then toggle the Use 2-step verification switch to off.
7. Enter the code, then select Continue.

Why am I asked to verify my identity when two-step verification is off?

You could be asked to pass two-step verification due to a number of factors such as the device, network, or browser you use to sign in to Intuit products. If we can't establish a high confidence of trust based on these factors, you may be asked to verify your identity to make sure your account is not compromised.

However, if you're sure you're signing in from a trusted device, you could be asked to verify your identity due to external factors, such as an ad blocker. In this case, either add the *.intuit.com domain to your ad blocker's allow list, or disable your ad blocker specifically for the *.intuit.com domain.