Security and two-step sign-in

Turn on two-step sign-in

1. Open Settings, Security.
2. Choose Text me a code (recommended, US and Canadian mobiles) or Email me a code. Prefer an app? Choose Rather use an authenticator app.
3. Choose Send code, type the 6-digit code, then Turn on.

The card then says On, with Change and Turn off. When you sign in, you'll be asked for a code.

What needs it

Two-step sign-in must be on, with your code entered, to:

• use the bank connection,
• register a number for texting and the phone agent,
• connect or read your email in RoleCall.

Code problems

• That code expired. Send a new one. Codes last 10 minutes.
• Too many tries. Send a new code. You get 5 tries per code.
• Wait N seconds before sending another code. Codes can be sent every 30 seconds, up to 6 an hour.
• That number can't get texts. Check the number, or use email instead.
• Finish two-step sign-in to continue. Enter your code to carry on.

Signing in

Choose Continue with Google, Continue with Apple, or your email and password (at least 12 characters). There's no reset link on the sign-in page: if you signed up with Google or Apple, use that button; otherwise email support@mdmltechnologies.com.

Signing out

Sign Out on your profile signs out this device. Changing your password (Change Password) signs out your other devices.

Roles

• Owner: everything, including Settings, Billing and security.
• Manager: runs the schedule, timesheets and team. The owner chooses some of what managers may do in Settings, Team & schedule.
• Staff: their own shifts, punches, time off, availability and tasks.

Access review and the audit log

Owners see an Access review on the Security page every 90 days: people with a login, software keys and bank connections. Choose I've reviewed this when you've checked it. On plans that include it, Who changed what at /audit lists every change.

Delete your account

On your profile, choose Delete account, type DELETE, then Delete my account. It removes your login and contact details; shifts you worked stay in your employer's records. An owner whose business still has other people's logins must remove them first, or email us. Deleting your login doesn't cancel the business's subscription: cancel in Billing first.