Set up multi-factor authentication (MFA)

Overview

Sumday requires all users to set up multi-factor authentication (MFA). This adds an extra layer of security by asking for a time-based code from an authenticator app whenever you log in.

This article walks you through how to complete MFA setup.

Note: Users who log in to Sumday via the Xero or Single Sign-On options will be taken through the MFA process of those providers.

Before you begin

Make sure you have the following:

Access to Sumday via a web browser
Your Sumday login credentials
A smartphone or device with an authenticator app installed
(e.g. Google Authenticator, Microsoft Authenticator, Authy, 1Password)

Setting up MFA at sign-in

These steps are for users who are creating a new Sumday account or logging in and being prompted to set up MFA for the first time.

From the Sumday homepage, create an account or login in with your Sumday email and password.
Once you've created an account or logged in, you will be prompted with a “Secure your account” screen with a QR code.
Open your chosen authenticator app and add a new account for your Sumday MFA process by:
- Tapping “+”, or a QR code icon, or "Add Account" (this varies by app)
- Choosing “Scan a QR code” or “Enter a setup key manually”
Scan the QR code displayed on the Sumday screen.
- If you can’t scan the code, click “Trouble scanning?” to reveal the manual setup key.
After adding the Sumday account to your authenticator app, a 6-digit code will appear.
Return to Sumday, enter the code in the “Enter your one-time code” field, then click Continue.
MFA will now be set up for all future logins. You will be asked for a one-time passcode from your authenticator app each time you log in. You can choose to be remembered for 30 days on trusted devices.

Troubleshooting MFA

The QR code doesn't work

Try the following steps:

Make sure you’re scanning within your authenticator app, not your phone’s regular camera.
Try re-scanning the code.
Click “Enter a setup key manually” to input the key instead.
Check your internet connection.
Refresh the browser or restart the MFA setup flow.

I changed my phone or device

Setting up a new phone or lost your old one?

Two paths depending on whether you still have access to your old device.

You still have your old phone (switching devices)

Easiest route is to migrate within your authenticator app. no Sumday changes needed. Most apps now sync codes across devices:

Authy / 1Password / Microsoft Authenticator: sign in on your new phone with the same account and your Sumday code appears automatically.
Google Authenticator: open the app on your old phone → top-right menu → Transfer accounts → Export → scan the QR with the new phone.

Once the new device shows the Sumday code, your next login will just work.

You've lost your old phone (or it's wiped / replaced / dead)

You'll need to reset 2FA on your Sumday account and set it up fresh on the new device. No support ticket required.

Step 1: sign in using your email as a backup

Go to the Sumday login page and enter your password.
When you're prompted for your 2FA code, click Try another method.
Choose Email. We'll send a one-time code to the email address linked to your account. Pop it in to finish signing in.

Step 2: reset your 2FA from your user settings

In the top-right of the app, click your initials.
Scroll down and click User Preferences.
On the User Preferences page, scroll to the Two-factor authentication section.
Click Reset 2FA, read the confirmation dialog, then confirm to reset.

Shortcut: you can also go straight to app.sumday.io/platform/user and scroll to the same section.

You'll be signed out straight away. When you sign back in with your new device, Sumday will walk you through setting up 2FA again from scratch.

Tip: this also works if you simply want to switch authenticator apps (say, from Google Authenticator to 1Password). Reset, sign back in, set up the new app.

I can't locate Sumday in my authenticator apps

If you’re unsure which app you used to initially set up MFA for Sumday, or can’t find a Sumday entry in your apps follow the a reset steps outlined above.