My account

Two-step authentication

Two-Step Authentication is a way of verifying your identity in two unique ways when logging into InTouch.

It provides an additional layer of security to keep imposters out, even if they have your password.

InTouch has two different methods of Two-Step Authentication:

App Based
Email Based

Whichever method you use, when you enter your code, leave Trust this device for 30 days ticked. For the next 30 days, InTouch won’t ask for a code when you sign in on that device, though it will still ask for your password.

App Based

App based Two-Step Authentication involves a third party app providing you with a unique code when logging into InTouch.

It is the most secure method of Two-Step Authentication and the one we recommend where possible.

Any authenticator app can be used for this but we suggest either Google Authenticator or Microsoft Authenticator.

To enable App Based Two-Step Authentication:

Navigate to your InTouch Settings > Security
Select Activate your Authenticator App
Open your Authenticator App of choice
1. For Google Authenticator:
  1. Select the ’+’ icon in the bottom right hand corner of the app
  2. Choose to either:
    1. Enter a Setup Key and enter the code provided by InTouch
    2. Scan a QR Code and scan the code provided by InTouch
2. For Microsoft Authenticator:
  1. Select the ’+’ icon in the top right hand corner of the app
  2. Choose ‘Other’ from the options provided
  3. Scan the QR code provided by InTouch
  4. Or, select Enter Code Manually to enter the code provided by InTouch
Enter the security code generated by the Authenticator App into InTouch

Once enabled, each time you log into InTouch your Authenticator App will generate a unique code. Enter this code into InTouch to gain access to your account.

Email Based

Email based Two-Step Authentication sends a unique log-in code to the email address associated with the InTouch account.

To enable Email Based Two-Step Authentication:

Navigate to your InTouch Settings > Security
Select Activate Email Two-Step Authentication
Select Yes to confirm

Once enabled, each time you log into InTouch, a unique code will be sent to the email address associated with your InTouch account. Enter this code into InTouch to gain access to your account. The code is near the start of the email’s subject line, straight after [InTouch], so you can usually read it from the notification without opening the email.

Signing in with an email or text code

Each code sent by email or text message works for a few minutes only.

If your code hasn’t arrived: select Resend code on the code page, beside Not working? Try Again. InTouch sends a new code the same way and shows “A new code has been sent.” You don’t need to enter your password again unless your code has already expired. If you already hold several unused codes, it asks you to use one of those instead.
If you have more than one code: any of your recent codes works, not only the newest. Once you’re signed in, the others stop working.
After several wrong codes: sign-in is locked for a short while. Wrong codes count across every sign-in in that time. Your next try returns you to the sign-in page, which tells you how long to wait before signing in again.

Authenticator apps make their own codes, so Resend code doesn’t appear for them, but the lock after several wrong codes applies to them too.

Removing Two-Step Authentication

App Based Two-Step Authentication can be removed from an account in two ways:

Within the user’s security settings
Within the user’s staff profile

Security Settings

Navigate to your InTouch Settings > Security
Deactivate Two-Step Authentication

Staff Profile

The following steps will need to be performed by someone with the permission to “Edit Staff”.

Navigate to your InTouch Settings > Staff
Select the user’s profile
Choose to Disable App Two-Step Auth