2FA Requirements for Viewing Sensitive Information on Mobile
September 30, 2024
2FA Requirements for Viewing Sensitive Information on Mobile
Product
Global
To align with updated security guidelines and protect sensitive personal financial information, users in all regions are now required to have 2FA enabled and verified in the last 24 hours to access private information related to:
Bank accounts
Pay slips
Employer and Tax Office related documents, letters, certificates and forms specific to each region
To enhance security, Employment Hero is discontinuing email-based 2FA on February 9, 2026, requiring partners to transition users to more secure methods like authentication apps, SMS, or passkeys while establishing internal workflows for managing account recovery requests.
Employment Hero has introduced two updates—customizable recovery contacts and brand-level request management—to give partners greater control over account recovery as they transition away from email-based two-factor authentication.
To boost security for inactive accounts without 2FA enabled, users will now face a mandatory one-time email verification step upon login to prevent unauthorised access.