Protect your login with two-factor

What it is

Your login opens everything your business keeps in Worklog, including your staff's ID numbers and bank details. With two-factor on, signing in asks for your password and then a 6-digit code from an authenticator app on your phone, so a stolen password alone can't get in.

Two-factor belongs to your login, not to a business. Each person switches it on for themselves, and it then covers every business they work in.

Open Sign-in & security

Owners on a computer: in the menu on the left, under Business, tap "🔐 Sign-in & security".
Owners on a phone: open Business Hub from the dashboard and tap "🔐 Sign-in & security".
If you're not the owner: tap "Security" (or "WhatsApp", while the bot is open) on the dashboard.

💡Everyone on the team can open this page, not only the owner.

Switch it on

You need an authenticator app on your phone — Google Authenticator, Microsoft Authenticator, Authy or any other.

On Sign-in & security, tap "Switch on two-factor".
Step 1: scan the QR code with your authenticator app. Can't scan it? Type the key shown under it into the app by hand.
Step 2: type the 6-digit code the app shows, and tap "Confirm".
The card now shows ON and says "Two-factor is on".

💡Codes change every 30 seconds. If Worklog says the code didn't match, type the one the app shows now.

Signing in

After your password, Worklog shows "Enter your code". Open your authenticator app, type the 6-digit code for Worklog and tap "Verify". Worklog doesn't open any of your screens until you do.

Resetting a forgotten password asks for the code too. When you save the new password, Worklog takes you to "Enter your code" first and then back to the reset page: type the new password again and save it.

Logging out, and logging out everywhere

"Log out" is on every screen except onboarding and billing. On a phone, tap Tools, then Log out at the bottom. On a computer, it's in the menu on the left, next to Sign-in & security. It's also at the top of the dashboard. It ends your login on the phone or computer you tap it on, and nowhere else. If you're signed in on another phone or browser, it stays signed in. Entries saved on a phone while it had no signal stay there until you sign in on that phone again. Quick Log messages still waiting for signal are deleted when you log out, so Log out tells you how many first. Logging out itself needs signal: with none, you stay signed in and it says so.

Lost your phone, or had it stolen? On Sign-in & security, tap "Log out everywhere" and confirm. That ends your login on every phone and browser, including the one you're on.

⚠️A device that was signed in may still work, and may still save, for up to an hour on the sign-in it already holds. After that it says "Your session has ended" and asks for a sign-in.

Switch it off

On Sign-in & security, tap "Switch off" next to Authenticator app.
Confirm. If Worklog asks for a code first, type it, and you're brought back to switch it off.

⚠️With two-factor off, your password is once again the only thing protecting your account.

If you lose your phone

There are no backup codes. Email hello@worklogsolutions.co.za from the email address you log in with, and Worklog resets two-factor after checking it's really you.

💡The safest habit is an authenticator app that backs itself up, so a new phone still has your codes.

The name the dashboard greets you by

The dashboard says "Good morning" to you by your first name, if you give one, or to your business by its name if you don't. Your first name belongs to your login, like two-factor: set it, change it or clear it under "👋 Your first name" on Sign-in & security, and tap "Save my name". It is only used to greet you, and it doesn't change your business's name anywhere.

Still stuck? Open the in-app help assistant, or email us at hello@worklogsolutions.co.za.

← Back to the Help Centre