In the Account security section of My Account, you can manage password and two-factor authentication (2FA) security settings.
Just log in to My Account (myaccount.myob.com), click the dropdown in the top-right corner and choose Account security.
You'll then see what security settings you have enabled and have ways to change or reset them:
Change your sign-in email address
In the Sign in section, click Change next to Email.
Verify your identify with a 2FA code.
Enter and confirm your new email address.
Click Save.
Change your sign-in password
In the Sign in section, click Reset next to the Password. An email is sent to the email address you sign in with.
Click here in the email and follow the onscreen prompts to reset your password.
Add passkeys
Passkeys are a phishing-resistant way to sign in to all MYOB software and services without entering your email address and password. Passkeys work with a quick check on a device you trust. They keep signing in simple while helping protect your account from stolen credentials, lockouts and fraud.
We recommend setting up multiple passkeys to give you more sign-in options and to avoid lockouts.
In the Sign in section > Passkey, click Add and follow the prompts. To add addtional passkeys or remove an existing one, click Manage, choose an option and follow the prompts.
Set up additional 2FA methods
Avoid sign-in hassles and getting locked out if you can't get codes via your usual 2FA method. When you set up more than one 2FA method, you'll give yourself options for receiving verification codes.
For example, you could set up SMS 2FA on your phone and the 2FA authenticator app on a tablet. Then, if you don't have your phone handy and can't receive SMS, you can still get your 2FA code using the authenticator app on the tablet.
In the Authentication section, click the Add (>) button for the additional 2FA method you want to set up.
You'll be prompted to verify your identity with a 2FA code. You'll receive this via the same method you normally use.
Follow the prompts to set up the additional method.
For best security, use passkeys as your main sign-in method, with multiple 2FA methods (we recommend that you use app 2FA, with SMS 2FA as a backup). Email 2FA is our least secure option and is being phased out. You’re no longer able to add email 2FA as a new 2FA option.
Set up 2FA on a new phone
If you receive your 2FA codes on a mobile device, like a phone or tablet, and you've changed that device, you can set up the new device to receive your 2FA codes.
How you do it depends on whether you still have your old device or if you've ever set up 2FA on a mobile device.
Reset a 2FA method
If you have more than one 2FA method enabled (or you have a recovery code), you can reset the authenticator app or SMS 2FA method. You might do this to:
change the phone number your SMS 2FA codes are sent to
re-link your authenticator app to MYOB
change authenticator apps
set up an authenticator app on a new phone
Email 2FA can't be reset – your only option is to remove it.
Email 2FA is being phased out, and we strongly encourage you to set up passkeys and use them as your preferred sign-in method. A passkey can use your device security, such as a fingerprint, face scan, PIN, or device password. Passkeys are more secure because they resist phishing, while email 2FA codes can be intercepted if someone accesses your inbox. You still need 2FA set up – use app 2FA as your primary 2FA method, with SMS 2FA as a backup.
To reset a 2FA method
In the Authentication section of the Account security page, click the ellipsis (...) for Authenticator app or SMS and choose Reset.
At the confirmation, click Reset again.
Choose one of your other methods to receive a 2FA code or use a recovery code to verify your identity.
Follow the prompts to set up authenticator app or SMS 2FA again.
Remove a 2FA method
For best security, use passkeys as your main sign-in method, with multiple 2FA methods (we recommend that you use app 2FA, with SMS 2FA as a backup). Email 2FA is our least secure option and is being phased out. You’re no longer able to add email 2FA as a new 2FA option.
If you need to remove a 2FA method, click the ellipsis (...) next to the method and choose Remove:
