Manage portal account security and recovery codes

Open profile settings

Go to Settings → Profile. Manage your personal details and password here. A password change checks your current password and asks you to repeat the new one.

Keep recovery codes

Two-factor authentication is required for accountants. Profile settings show how many recovery codes remain unused. Store your codes somewhere safe outside your authenticator.

Generating new recovery codes invalidates unused codes from the previous set. New codes are shown once; save or download them before continuing.

Set up a new authenticator

Use the authenticator-setup action when moving to another phone, for example. Read the confirmation: the current link is removed and you immediately go through setup with a new QR code. Have your phone ready and complete the new verification.

Lost access to your authenticator

Use the recovery option at sign-in and enter your email and an unused recovery code. With valid details, you receive an email sign-in link; open it on the same device and set up a new authenticator.

The general check-your-email message does not confirm that the code was valid. If nothing arrives, check your details and junk mail. Do not share codes or passwords with support.