Skip to main content
FixedAsset Pro
← All help articles

Users, security and administration

Sign-in security and two-step verification

Last updated Oct 29, 2026

Turn on two-step sign-in (web edition)

  1. Open your user menu (top right) › Security & MFA.
  2. Click Set up authenticator app. Install an authenticator app on your phone first, for example Microsoft Authenticator, Google Authenticator or another TOTP app.
  3. Scan the QR code with the app, or type the key it shows. The key is shown only once.
  4. Enter the 6-digit code from the app and click Verify and turn on.
  5. Store your recovery codes: copy them or download them as text, then tick I have stored my recovery codes. Each code works once if you lose your phone, and they are not shown again.

At the next sign-in you enter the code from the app after your password. If your organisation allows it, a code can also be sent by e-mail.

If your phone is lost or replaced, sign in with a recovery code and use Remove authenticator, then set up a new one. Issue new recovery codes replaces your current codes. If you have no recovery code left, ask your administrator to reset your two-step sign-in.

Sessions

  • My Sessions (user menu) shows where you are signed in, and lets you sign out other devices.
  • Administrators see every user's sessions in Administration › Active Sessions, and sign-ins in Login History and Security Events.

Set the policy (web administrators)

Open Administration › MFA & Security. The tabs are Overview, Policy, Recovery, Directory (LDAP) and Single sign-on.

  1. Overview shows how many people have MFA on, who must use it but has not set it up, locked accounts and failed sign-ins in the last 24 hours.
  2. Policy: choose the Roles that must use MFA; holders of these roles must set up an authenticator before they can work. Set Remember a device for (0 to 90 days; 0 asks at every sign-in).
  3. Directory (LDAP) and Single sign-on connect your directory or identity provider.

Desktop edition

  • If your role must use two-factor sign-in, you are asked for a code from your authenticator app after the password, and taken through enrolment and recovery codes the first time. To set it up yourself, use File › Two-factor Authentication.
  • Administrators set the password policy, the roles that must use two-factor sign-in, LDAP / Active Directory and OpenID Connect single sign-on under Administration › Security. SAML sign-in is not available in this release.
  • There is no self-service password reset on the desktop: an administrator resets it in User Management.

Forgotten password (web)

On the sign-in page click Forgot password? and then Send me a reset link. A single-use link is e-mailed to you. If it does not arrive, ask your company administrator.

Related