The second sign-in step for staff

Staff tools can see and change a lot: the directory, accounts, giving records. A second sign-in step means a stolen email or text code alone can’t open them. After the usual code, you also type the 6-digit code from an authenticator app on your phone.

Adding an app to your sign-in

1. Install an authenticator app on your phone if you don’t have one: Google Authenticator, Microsoft Authenticator and 1Password all work.
2. In the app, open My family & account and choose the Me tab.
3. Under Second sign-in step, choose Add an authenticator app.
4. In the authenticator app, add an account and scan the square code on the screen. If you’re doing this on the same phone, choose “enter a setup key” in the authenticator app and type the key shown instead.
5. Type the 6-digit code the authenticator app shows, and choose Turn it on.

From then on, each time you sign in, you’ll be asked for the app’s code after the usual one.

Requiring it for all staff (webmaster)

1. First add an app to your own sign-in (above), then sign out and back in with it.
2. Open Administration → Church settings and choose the Staff sign-in tab.
3. Tick Require the second sign-in step for staff and choose Save.
4. Tell your staff before their next sign-in. Until they add an app, their staff tools stay locked and Administration shows them how to add one. Their member pages keep working.

If something goes wrong

• “That code didn’t work.” Codes change every 30 seconds. Type the newest one, and check that your phone’s clock is set automatically.
• Someone lost their phone. Ask Hillfold to remove the old app from their sign-in. They can then sign in with the usual code and add a new app.
• Staff tools say they need the second step. Add an app on My family & account → Me, then sign out and back in.