All Collections
Getting started
Two-factor authentication (2FA)
Two-factor authentication (2FA)
Kirsten Simmons avatar
Written by Kirsten Simmons
Updated over a week ago

Table of contents:

Two-factor authentication (2FA) provides an additional layer of security for your TFX account. Requiring an extra step to verify your identity significantly increases the difficulty for attackers to access your data, even if your login credentials are compromised.

Enable two-factor authentication

You can enable 2FA on the Account settings page if you have registered with your email address and verified your phone number. The following warning message will be shown in your account:

To enable two-factor authentication:

  1. Click on Your name in the top right corner of the screen and click Account settings.

  2. Scroll down to the Two-factor authentication (2FA) section and click the Enable two-step verification link.

  3. The instructions will be displayed as follows:

    1. Install the Google Authenticator app (or Authy, Duo, etc.) on your smartphone from App Store or Google Play.

    2. Open the Google Authenticator app and tap Scan a QR code. Refer to the Google Help article on how to generate codes in Google Authenticator.

    3. Scan the QR code from your computer screen via the app.

    4. Enter the 6-digit code generated by the authenticator app, then click the Connect Phone button.

  4. Two-factor authentication is enabled.


Sign in with two-factor authentication enabled

Once 2FA is enabled, you will be prompted to enter a temporary authentication code each time you sign in if you are registered with your email address:

  1. Navigate to the taxesforexpats.com web page and click the Log in button in the top right corner.

  2. Enter your TFX credentials and click Log in.

  3. Open the Google Authenticator app (iOSAndroid) or a similar application on your smartphone.

  4. The app generates a code for TFX.

  5. Enter this code into the Authentification code box and click Verify.

    Notes:

    • The code in Google Authenticator changes every 30 seconds. If the code you enter is not accepted by TFX, enter the new code shown in the app.

    • To temporarily disable 2FA for the current device, select the Remember this device for 30 days checkbox. You will not be prompted to enter the authentication code for 30 days when signing in from this device.


Alternative method of verification: SMS

If, for any reason, you are unable to use Google Authenticator or a similar application, an alternative method of verification is available - SMS messages.

To use SMS messages instead of authentication app-generated verification codes:

  1. Click the Can't do it? Try logging in via SMS link.

    Note: if you have several verified phone numbers, you can choose the desired phone number to receive the code.

  2. Enter the code from SMS and click Confirm.

You may experience issues wherein the Google Authenticator app will not generate codes from your new device (phone/tablet, etc.). You can use your old device to activate the authenticator. Refer to Transfer Google Authenticator codes to a new phone.

❗ Important note: if you can't use SMS verification, don't hesitate to contact our support by clicking SMS not working? Please contact support.


Disable two-factor authentication

To disable two-factor authentication:

  1. Click on Your Name in the top right corner of the screen and click Account settings.

  2. Scroll down to the Two-factor authentication (2FA) section and click the Disable link.

  3. Enter your TFX account password (you don't need to use the Google Authenticator application here), then click the Yes, disable 2FA button.

    Note:  if you have registered with a Google account or Apple ID, you don't have a TFX password. Thus, to disable 2FA, you must create the password for your TFX account first.

Did this answer your question?