2-Step Login Setup

Purpose: If your company uses 2-Step Login, you will be required to set up 2-Step Login authentication to log in to BambooHR. This help guide will show you how to set up this feature.

Employee login

The next time you log in to your BambooHR account, you will see a notification that lets you know when the 2-Step Login will be required. You will have the option to set up the verification code immediately, or click Not Yet to continue access to BambooHR. Once the selected start date occurs, you cannot log in to your account without setting up 2-Step Login.

Set up 2-Step Login

If you do not have an authenticator app and would like to use Google Authenticator, click on the link for "iOS" or "Android" (as shown in the screenshot above). Or, you can search for an authenticator app of your preference in your mobile app store. 2-Step Login will work with any authenticator app.

You will not be able to set up 2-Step Login on our mobile app. You will need to set it up in your web browser. Once you set it up, the mobile app will require an authentication app code from you to log in to your account.

Your mobile device

  1. Open the authenticator app and tap to add a new authentication.
  2. You have the option to scan the QR code or enter the code manually.
  3. Once you scan the QR code or enter the code, you will see the passcode associated with your BambooHR login credentials. This passcode will automatically change every 30 seconds.

Authentication app code

Enter the six-digit passcode from the authentication app. Mark the box if you would like the system to remember this computer for 30 days. After 30 days, we will ask for a passcode again. Please note that if you log in to your account on another device, you will need to enter a new passcode and then click Next.

If you attempt to authenticate with a passcode too many times without success, you will get locked out for 30 minutes.

2-Step Login backup codes

When setting up your 2-Step Login for the first time, you will get a prompt with a list of backup codes. You can use backup codes if you lose your phone with the authenticator application or do not have access to your phone. You have the option to download or print your backup codes and store them in a safe place.

After you use a backup code to log in to your account, a strikethrough will appear on the passcode, and you cannot use it anymore. You can generate passcodes again if you have lost them or believe they are compromised.

You can access your backup codes by clicking on your avatar in the top right corner when logging in to your BambooHR account. Click View 2-Step Login Backup Codes.

What if I am setting up 2-Step Login through the web browser on my mobile device?

If you set up 2-Step Login through the web browser on your mobile device, you will not be able to scan the QR code. Instead, tap Enter Code Manually.

This action will open a pop-up box with a 10-digit code that you can use to set up the authenticator app. You will likely need to turn your device to landscape mode to see the complete code.

In the authenticator app, tap to add a new authenticator and then tap Manual entry. Enter your account email address and add the 10-digit passcode for the key.

Once you set up the authenticator, you will need to enter the new six-digit passcode in BambooHR through your web browser to log in.

What's next?

Do you need help creating a new password?

Check out our login troubleshooting help guide if you need help logging in to your account.