If you don't already use SSO i.e. SAML SSO, Google SSO, or Facebook SSO, we're asking you to at least enable MFA. You must take action by the 15th January 2027.
What is MFA at Appointedd?
Multi-factor authentication (MFA) is an authentication method (login process) that requires a user to provide a one-time verification code to gain access to their Appointedd acccount, in addition to their usual email and password.
Why do I need to enable it by 15th Jan 2027?
A password alone isn't enough to keep your account safe. Passwords get phished, guessed, or leaked in breaches that have nothing to do with Appointedd. MFA adds a second step using an authenticator app, so a stolen password alone can't get an attacker into your account.
By enabling MFA you are protecting your account against...
Phishing - even if you're tricked into entering your password on a fake site, the attacker still can't get in without your authenticator app.
Leaked or reused passwords - stops attackers using passwords leaked from other, unrelated breaches.
Unauthorised access after staff changes - with individual logins, you can revoke one person's access without resetting it for the whole team.
Leaked client data - you're protecting your clients' data, not just your own. Your Appointedd account holds your clients' personal details and booking history. MFA helps keep that data secure, and is part of our commitment to keeping the whole platform safe and trustworthy for every business that relies on it.
The good news? Setup takes about 2 minutes with any free authenticator app. Keep reading to see how.
How do I enable it?
Step 1: Download an authenticator app
In order to use MFA for your Appointedd account, you'll need to use an authenticator app on your mobile to a generate one-time password.
You can use any authenticator app that you'd like. If you don't have one already, you can download one from Google Play or the Apple App Store. A few examples of what you could use:
Step 2: Enable MFA in your Appointedd account
Once you have your downloaded your authenticator app on your mobile, log into your Appointedd account by using your usual email and password.
If you are using the legacy back office, follow these steps:
Go to the profile icon in the top right corner
Select Edit login details from the drop down
Under Authentication methods, click Enable MFA
Scan the QR code that appears using your authenticator app on your mobile device
This will generate a 6 digit temporary code, so add this code under Verification code
Hit Submit and you're done!
If you are using the Hub, follow these steps:
Go to the profile icon in the bottom left corner
Select Security Centre
Select Turn on next to two-factor authentication
Scan the QR code that appears using your authenticator app on your mobile device
Select Continue to verification and enter the 6-digit codes that displays on your mobile
Click Complete Setup and you're done!
What happens next time I login?
Now that you've connected your authenticator app, MFA is enabled for your Appointedd account, and you'll be asked for a one-time code every time you log into your Appointedd account.
When you log in, simply follow these steps:
Enter your email address and password and click Login
You'll be asking for a Verification code
Open your authenticator app on your mobile device and locate Appointedd
Enter the Verification code that pops up - be quick to ensure the code doesn't*
Click Confirm
*If you didn't add the correct code or the code expired by the time you hit confirm, simply add the new code that generated.
Frequently Asked Questions
What happens if our team shares one login?
MFA technically works on a shared login, but it only protects against external attackers - it won't give you individual accountability or let you revoke one person's access without resetting it for everyone. If you must use a shared login, users can scan the same QR code on their own authenticator apps, or keep the authenticator app on a shared store device. Otherwise, individual logins - free, same setup effort - will solve this properly and it's what we strongly recommend.
It's one more step to log in!
Yes an additional step will be involved moving forward, but an extra 10 seconds to prevent your account from an attack - it's worth it!
What if we already use SSO?
Fantastic! SSO (SAML, Google or Facebook) satisfies the requirement as an alternative to MFA. No further action is needed if SSO is already connected.
What happens if I lock myself out of my authenticator app or can't use MFA otherwise?
In the event that you lock yourself out, or can't use MFA for some reason, you can request MFA to be disabled for your login account via our 24/7 support chat. You will need to verify that you are who you say your are to our support team for them to disable MFA. Our team will ask you some details that only you or your Appointedd admin will know.