Account security FAQs

1. How often will I need to complete the 2-factor authentication process to access my account?

2. Am I required to enable 2-factor authentication on my account?

3. Do all users on my account have their own 2-factor authentication?

4. As an administrator of my account, can I ensure that all users have 2-factor authentication enabled?

5. What happens if I lose my phone?

How often will I need to complete the 2-factor authentication process to access my account?

The 2-factor authentication process will reset every 14 calendar days if you select the "Remember me for 14 days" option when entering the verification code. However, if at any point you select the sign-out option from the settings menu, you will be required to go through 2-factor authentication when you next log in to GoCardless.

Am I required to enable 2-factor authentication on my account?

We strongly recommend that you enable 2-factor authentication so that you have greater account protections.

Do all users on my account have their own 2-factor authentication?

Yes. If enabled, all users use their own device to complete the secondary authentication step when signing in.

As an administrator of my account, can I ensure that all users have 2-factor authentication enabled?

At present, you would need to oversee that this measure is implemented with all users of your organisation as required. In the future, as an organisation administrator, you will be able to enforce that all users within your organisation have 2-factor authentication enabled.

What happens if I lose my phone?

You will need to follow the recovery process outlined here.

We recommend that you use the authenticator app as your primary method for two step sign in / Multi Factor Authentication (MFA).

If you can no longer access your GoCardless account at all, please raise a ticket with our Support team.