Two-factor authentication (2FA), also called MFA in Rounded, adds an extra layer of security by requiring a code from your phone alongside your password when you sign in.
Note: 2FA is mandatory for all accountants from 5 November 2026.
Setting up 2FA
Go to Settings → Account and security.
Under Two-factor authentication, select Use an app or Use SMS (and re-enter your password if prompted).
Complete the setup for your preferred method:
Authenticator app (recommended): Scan the QR code using Google Authenticator, Microsoft Authenticator, or 1Password. Enter the 6-digit code shown in the app, then click Verify and enable.
SMS: Enter an Australian mobile number starting with +61 (omitting the leading 0, e.g. +61412345678) and click Send code. Enter the received code and click Verify and enable SMS.
Save your recovery codes. Download or copy these to a secure location such as a password manager. Each code acts as a one-time sign-in option if you lose access to your phone.
⚠️ Support can't restore access if you lose your phone and all your recovery codes.
How to sign in
Sign in with your username and password.
When prompted, enter the code from your authenticator app or SMS (or use a recovery code if your phone isn't available).
Note: Rounded remembers trusted browsers for 14 days unless your browser settings clear site data upon exiting.
Got a new phone or lost your old one?
Sign in using a recovery code if necessary.
Navigate to Settings → Account and security and select Disable MFA.
Re-enable 2FA using your new device.
Troubleshooting
Code not accepted: Ensure your phone's time setting is set to automatic and use the latest code. After 3 invalid attempts, wait 20 minutes before trying again.
Phone number rejected: Verify that you are entering a valid Australian mobile number beginning with +61 and excluding the initial 0.
No SMS received: Wait 30 seconds, then select Resend SMS code.