Two-step verification (2SV) in myIR will become compulsory for all customers over the next year, starting from 28 April 2025. Find out how you can set this up below.
There is also information on how to manage your 2SV settings in myIR.
Manage two-step verification settings in myIR
What is two-step verification?
2SV is a form of multi-factor authentication (MFA) and has been introduced in myIR to add an extra layer of security. This means you’ll need to provide a unique security code each time you log in to myIR. Even if someone knows your password, they will not be able to log in without a second form of verification.
Setting up two-step verification in myIR
When 2SV becomes compulsory for you, if you have not already set it up, then you’ll be prompted to do this when you log into myIR. However, you can set this up in your myIR account before it becomes compulsory by following these simple steps.
- Log in to your myIR account
- Access the 2SV set-up. If you are logging in to myIR for the first time, or 2SV has become compulsory for you, then you will be prompted to set this up. For other customers go to 'Manage my profile' and select 'Change two-step settings' in the security panel.
- Choose your verification method. You can choose to receive security codes by email or an authenticator app. You can also set up both methods for added flexibility.
Using email for two-step verification
- On the 2SV set-up page, select 'Use email' and click 'Save'.
- An email with your myIR security code will be sent to your registered email address. Enter the security code in the field provided on the screen and click 'Confirm'. You can choose to 'Trust this device'.
When you cannot receive security codes by email
2SV security codes can only be received by email if the email address you are using is unique to the myIR logon. If there is more than 1 myIR logon using an email address, you’ll see a message advising you cannot receive your security codes by email.
You can either update the email on your myIR profile so that it is unique, or you can choose to get your security codes by authenticator app instead.
Please note: from 29 April 2025, the email address used for authentication will not need to be unique to the web logon (although it is still recommended).
Using an authenticator app for two-step verification
- Select 'Set up authenticator app' on the 2SV set-up page. If you don’t have an authenticator app, then go to step 2. If you already have an authenticator app, then go to step 3.
- Download an authenticator app from your App Store (iOS) or Google Play (Android). Any app that generates time-based 1-time passwords can be used. Popular options include Microsoft Authenticator and Google Authenticator.
- Add your myIR account to your authenticator app. In your authenticator app, select 'Add account'. Scan the QR code displayed on the myIR setup page with your mobile device. If you cannot scan the QR code, manually enter the code provided on the screen into the app.
- Once your myIR account is set up in the authenticator app, you will see a 6-digit code that changes frequently. Enter this code on the myIR setup page and click 'Confirm'. You can choose to 'Trust this device'.
Log into myIR with two-step verification
When you log in to myIR with two-step verification set up, you’ll need to enter the 6-digit security code. Enter the security code you receive by your preferred method.
If you have both the authenticator app and email set up, you only need to enter 1 code. myIR requests the authenticator app code by default. To enter an emailed security code instead, select ‘More options’ on the two-step verification page and then ‘Get an email with your security code’.
If you enter the wrong security code too many times, you'll have to wait at least 15 minutes before trying to log in again. You’ll be sent a new code each time you log in.
Trust this device
When you enter your two-step security code after logging in to myIR, you can also choose ‘Trust this device’. This means for 90 days you may not need to enter a security code the next time you log in using the same browser on that device.