Two-Factor Authentication (2FA) adds an extra layer of security to your BrightHub account and any other Bright Products you may have by requiring a verification code when you log in.

Once enabled, you’ll need to confirm your identity using a code sent to you, in addition to your email address and password.

Logging in with 2FA enabled

When 2FA is turned on for your account or organisation, you’ll see an extra verification step when you log in.

Step 1: Log in to BrightHub

Enter your usual email address and password as normal.

Step 2: Verify your login

You’ll be asked to verify your login. A one-time verification code will be sent to your email address. The email address will be the one used to log into your BrightHub account.
 

Step 3: Check your email

Open the email from BrightHub and note the verification code provided.

Step 4: Enter the code

Return to BrightHub, enter the code in the verification field, and click Verify.

You can also choose Remember this device. If selected, you won’t be asked for a code again on that device in future.
 

Changing your 2FA settings

To change your 2FA Method please follow the below steps.

1. Log in to BrightHub
2. Click your profile icon (your initials) in the top-right corner
   
   
3. Go to Profile → Security

4. Update your Two-Factor Authentication method

   
    

   Note: Disabling 2FA will not be possible in the future. You can only change the authentication method.

    

Choosing and Setting Up Two-Factor Authentication (2FA)

Two-Factor Authentication (2FA) adds an extra layer of security to your account by requiring a second verification step when you sign in. When enabling 2FA, you’ll now see clear security indicators to help you choose the method that best suits you.

Available 2FA Methods

Recommended Option: Authenticator App (Most Secure)

Authenticator apps generate a time-based code on your device, making them the safest option.

We strongly advise to us Microsoft Authenticator App. 

How to Set It Up

1. Log in to your account and go to Security Settings.
2. Select Enable Two-Factor Authentication.
3. Choose Authenticator App.
4. Download the Microsoft Authenticator app from the Android Google Play Store or the Apple App store.
5. Scan the QR code displayed on screen using the app.
6. Enter the 6-digit code shown in the app to confirm setup.
7. Save your backup/recovery codes in a safe place.

✅ Best choice for maximum security

Email Authentication (Moderately Secure)

With this option, a one-time verification code is sent to your registered email address each time you sign in.

How to Set It Up

1. Go to Security Settings in your account.
2. Select Enable Two-Factor Authentication.
3. Choose Email.
4. Confirm your email address.
5. Enter the verification code sent to your inbox to complete setup.

ℹ️ straightforward to use and reliable, but depends on email account security.

SMS Authentication (Less Secure)

SMS sends a verification code to your mobile phone. While convenient, it is less secure than the other options.

How to Set It Up

1. Open Security Settings.
2. Select Enable Two-Factor Authentication.
3. Choose SMS.
4. Enter your mobile phone number.
5. Enter the code sent via text message to confirm.

Common Questions

“Why can’t I turn off 2FA?”

• Bright has enabled mandatory 2FA to protect your data. This setting is controlled by Bright and cannot be overridden.

“Is this a bug? It’s forcing me to set up 2FA.”

No, this is expected behaviour for:

• New organisations, or
• Organisations with mandatory MFA enabled

This helps keep your financial and client data secure.

“Can Support turn 2FA off for my organisation?”

No. Mandatory 2FA is a security feature and cannot be disabled by Support.

We’re happy to help you choose the simplest MFA option for you or your team.

“l can't access my email or phone, how do I log in?”

The admin or owner of the account/organisation can help you change to a different method of authentication so you can regain access quickly.

1. The admin or organisation owner needs to go into BrightHub
2. Once in BrighHub select members on the left hand side of the page.
3. Select the manage button next to the Staff member needing to regain access.
4. Select ‘Reset 2FA’ from the drop down.
5. Then select the Method your staff member would like to use.
6. If you select Email, When your staff member next logs in they will be emailed the code for their 2FA. 
7. If you select SMS then the following applies. 

• You will be asked to enter the mobile number that will be used for the 2FA
• That number will then be sent a Verification code
• You then must input the code provided to confirm this number is correct and this turns the 2FA method on. 
• The next time the Staff member logs in they will get an SMS with their 2FA code to login.
•  

Our Recommendation

For the best balance of security and convenience:

• Authenticator apps offer the strongest protection
• Email 2FA is a great option if you don’t have access to a mobile device