2-step authentication is a method to secure online accounts. Single Touch Payroll uses 2-step authentication to verify your identity before submitting data to the ATO. It requires you to know something, a password, and possess something, an authentication code created by an app installed on your mobile device, to log in.
The benefit of this approach is that even if someone guesses your password, they also need to be in possession of your mobile device to break into your account.
To set up 2-step authentication with Google Authenticator on a phone
You will need your iOS or Android device to complete these steps.
To set up 2-step authentication:
Install the Google Authenticator app on your iOS or Android device.
Open the app and allow it to access your camera.
Tap plus + (iOS) or Begin Setup (Android).
Tap Scan a barcode.
Scan the QR code displayed on your Single Touch Payroll screen. If you can't scan the QR code, type the Google Authenticator key into the Google Authenticator app. Google Authenticator Key.
Enter the 6-digit verification code displayed in the app and click Verify. You now have 2-step authentication set up on your mobile device to securely access Single Touch Payroll.
To use 2-step authentication with Single Touch Payroll
To use 2-step authentication:
Open Google Authenticator on the device where it is set up.
Log into Attaché Online and go to the Single Touch Payroll menu.
If it is the first time you have accessed this menu, you will be prompted to enter your Attaché Online password again.
After you have entered your password, Enter the 6-digit code displayed in your Google Authenticator app in the Google Authenticator Code field in the Single Touch Payroll screen and click Verify. The Single Touch Payroll list screen should then appear.
📌 Note: The 6-digit verification code updates every 30 seconds and is valid for two minutes. If the time expires, return to your device to get an updated code.
Cancelling 2-step authentication
You may have to cancel 2-step authentication in some circumstances. For example, if you need to set up the Google Authenticator app on another device or a new phone.
To cancel 2-step authentication, see: Cancel two-step authentication in Attache Online.