Update on Removal of Email as a 2FA method on Web for Partners

Starting February 9, 2026, Employment Hero will discontinue support for email as a method to receive Two-Factor Authentication (2FA) codes on our payroll web product (for all Partner brands). This change enhances security by requiring users to use more robust 2FA methods (Authentication App or SMS).

Users currently using email for 2FA will begin seeing notices about this change within the platform starting January 19, 2026.

What if a user cannot verify 2FA? (Account Recovery)
If a user is unable to verify their 2FA, they will be able to submit an Account Recovery Request directly through the platform.

• Partner Users (or the nominated Account Recovery Contact) will receive an email notification when a request is submitted.
  
• They can then approve or decline the request via the Partner Dashboard under User Management > Account Recovery.

For further information: Account Recovery for Partners: AU | MY | NZ | SG | UK

Actions Required

1. Review Internal Account Recovery Processes
Ensure you are prepared for the change by defining who will handle Account Recovery Requests and establishing clear workflows and processes for efficient handling.

2. Prepare and Inform Your Users
Inform your users about the requirement to set up either an Authentication App or SMS Authentication. Also, instruct users who have already set up these methods to verify their details (e.g., ensuring their mobile number or authenticator app access is current).

3. Recommend Passkeys for Enhanced Security
It is highly recommended that users set up a Passkey. Passkeys provide easier login and serve as a reliable backup if users experience issues with their Authenticator App or SMS Authentication.

For further information:
Set up Two-Factor Authentication (2FA) - AU | MY | NZ | SG | UK
Sign in with a passkey - AU | MY | NZ | SG | UK