This article explains how to log in to Personio with two-factor authentication (2FA). It explains how to set up 2FA on your mobile device. It also explains what to do if you lose access to your authenticator app or switch to a new device. If you're having trouble with 2FA, learn how to troubleshoot 2FA issues.

Your Administrator can turn on 2FA for your account. If it's active, you need to enter a second code along with your password to log in to Personio. You need to set up an authenticator app first before you can use any 2FA method. Once you set up the authenticator app, you can choose to receive authentication codes through email as a backup option.

Tip:
2FA only applies if you use an email and password to log in. 2FA doesn't apply if you use single sign-on (SSO) to log in. Contact your Personio Administrator if you want 2FA protection.

Before you start

• To use 2FA, you need to be able to log in with a username and password.

Set up 2FA using an authenticator app

To set up 2FA using an authenticator app:

1. Download an authenticator app to your mobile device. We recommend using Google Authenticator, but any authenticator app works.
2. Open the app on your mobile device.
3. Open a browser and go to "domainname.app.personio.com/login"
4. Log in with your email address and password.
5. When the barcode appears, scan it with your authenticator app on your mobile device.
6. Optional: if you can't scan the barcode, click Trouble Scanning? and use the code to set up the authenticator app manually.
7. Enter the code from the app into the browser to complete the setup.

Use the email option for 2FA

Note:
You need to first set up 2FA with an authenticator app before you can use the email option.

If you're having trouble with the authenticator app or would prefer to use email, you can receive your 2FA code through email. 

1. Log in to "domainname.app.personio.com/login" with your email address and password.
2. On the 2FA screen, select Try another method.
3. Select Email.
4. Check your inbox for an email from Personio.
5. Enter the code from the email into the login screen to complete the process.

Set up 2FA on a new device or after losing access

You need to set up 2FA again if you:

• Get a new phone or switch mobile devices
• Switch to a different authenticator app
• Accidentally delete your authenticator app
• Can't access your codes

To set up 2FA on a new device or after losing access:

1. Download the authenticator app onto your new device (if you've switched devices).
2. Reset the authenticator:
   • If you have permission: go to your profile, click the three-dots icon in the top right, click Manage account, and reset your 2FA.
   • If you don't have permission: contact your Administrator and ask them to reset it for you.
3. Log in to Personio at "domainname.app.personio.com/login" using your email and password.
4. Scan the new barcode with your authenticator app.
5. Enter the code from the app into the browser to complete the setup.