Can I opt out of 2FA or stop the code from going to the owner’s email?
No. Two-Factor Authentication (2FA) is mandatory for BrightBooks and cannot be turned off.
If your 2FA code is currently going to the business owner’s email, that means you are all sharing a single login. For security and audit reasons, each person should have their own Bright ID and BrightBooks user.
To stop codes going to the owner’s email:
- Ask the owner (or practice admin) to add you as your own user in BrightBooks.
- Log in with your own Bright ID.
- Set up 2FA on your own device/email when prompted.
Once you have your own user, your 2FA codes will go to you, not the owner.
How can a second person get a 2FA code?
Each user can only have one 2FA method (for example, one authenticator app or one email/phone destination). You cannot send the same 2FA code to multiple people.
If a second person needs access:
- Do not share a single login or try to share 2FA codes.
- Instead, add them as their own user in BrightBooks (with their own Bright ID).
- They will then set up 2FA on their own device.
This keeps your data secure and provides a clear audit trail of who did what in the system.
Why am I being asked for a 2FA code more than once?
If you are asked for a 2FA code frequently, it is usually because the device or browser is not being remembered.
When you enter your 2FA code:
- Make sure you tick “Remember this device” on login if you are on a trusted device.
- Use the same browser and device next time you log in.
- Ensure your browser is not clearing cookies or site data automatically, as this can cause BrightBooks to forget your device.
You may still be asked for a code again if:
- You log in from a new device or browser.
- You clear cookies or use private/incognito browsing.
- Security rules require re-authentication after a period of time.
Why can’t I turn off 2FA?
2FA is a core security requirement for BrightBooks and cannot be disabled. This protects your business, your clients, and your data from unauthorised access.
Also known as:
- “Can I disable MFA?”
- “Can I log in without a code?”
- “How do I turn off the extra security step?”
If you are having trouble with 2FA (for example, you’ve lost access to your email or authenticator app), contact Bright support, as appropriate.