Two-factor authentication (2FA) means that even if someone learns your password, they still cannot get in without a second code from your phone. For an account that controls business borrowing, it is well worth the thirty seconds it adds to signing in.
How to set it up
- Sign in and go to Account > Security > Two-factor authentication.
- Choose your method — an authenticator app (recommended) or a code sent to your registered mobile.
- Scan the code or confirm your number, then enter the one-time code to prove it works.
- Save your backup codes somewhere safe in case you lose your phone.
If you get a new phone
Turn 2FA off and back on with the new device, or use a backup code to sign in and re-register. If you are locked out entirely, contact support — we will verify your identity before restoring access.
Whenever a change touches money, access or your company’s data, we verify the request is genuinely from an authorised person before we act. We will never ask you to confirm full security details by email or phone to release information or push through a change — if a message pressures you to do that, treat it as suspicious and contact us to check.
See also: Keeping your account secure, How to reset your account password, What to do if you suspect unauthorised access.