Why have I been emailed a verification code?
This article explains the verification emails when logging in to your ExpensePlus account and what to do with them.
In this article:
How do I enter the verification email code?
When someone is trying to log in to ExpensePlus, where a new device is detected, ExpensePlus will send a verification email to help keep your account secure.
This doesn’t necessarily mean your account has been compromised.
For example:
- It could be a new device, or
- It's been a while since you last signed in on that device, or
- You may have cleared your browser cookies or cache since your last sign-in.
How do I enter the verification email code?
Once you have entered your email address and password on the ExpensePlus login screen, if a new device is detected, then a verification email will be sent to you.
To sign in, simply enter the verification code from your email into the box titled 'Verification Code' on the login screen.
When signing in using the same device in the future, you won't need to enter an email verification code (unless you have cleared your browser cookies or cache since your last sign-in).
How can I make my user account more secure?
You can make your user account more secure by:
- Setting up TouchID
- Setting up an Authenticator App
- Updating your Email Verification Settings to Always required (see instructions below)
How can I update my email authentication settings?
By default, email authentication is set to only send an email when a new device is detected. It's possible to change this within the Email Authentication settings screen.
If email authentication is set to 'Always', then an email verification code will be required every time you sign in to ExpensePlus.
Whilst setting email authentication to 'Always' will provide you with multi-factor authentication, typically setting up an Authenticator App is more secure.
We'd highly recommend not setting email authentication to 'Never' as this could put the security of your account at risk if someone were to get hold of your password, and no other form of multi-factor authentication has been set up for your account.