Start MFA in your Xero account
Follow the MFA setup prompt when you sign in, or open your initials or profile image, choose Account, and select Set up next to Multi-factor authentication.
Choose the option for an authenticator app and continue to the enrollment code. Use the browser setup flow rather than looking for this setting in the Xero Accounting app.
Add Xero to Sign In
You can use Sign In, our authenticator app for codes on your iPhone.
- With the setup QR code on another screen, open Sign In and tap Add → Scan QR Code.
- Scan the code, review the account details, and tap Add Account.
- Enter the current code back in Xero, then complete the required backup-method setup.
If scanning is unavailable, choose Xero’s option to enter a setup key instead. In Sign In, choose Add → Enter Setup Key, set Service to Xero and Account to your account name, paste the secret into Key, then tap Add Account. Keep this key private.
Configure a backup method
Choose a backup email address different from your Xero login email, or set up security questions. Confirm the email using the code Xero sends. Keep the inbox secure and any saved security answers accessible without your phone.
When your authenticator is unavailable, select Use a backup method instead or the alternative-authentication option on the login screen.
Move to a replacement phone
After regaining access, open Account → Additional Security and choose Change under Connected device. Verify with an available method and enroll the replacement.
Xero shows the QR code and setup key during enrollment. If backup verification also fails, contact Xero Support and follow its ownership-verification process.
If a code does not work
Make sure the Xero entry in Sign In matches the account you are using. Wait for a fresh code, then enter it before it changes. If fresh codes keep failing, check that your iPhone uses automatic date and time.
Keep a working sign-in session and your recovery information available while resolving the problem. Adding an entry to Sign In does not finish enrollment: the service must accept a code and confirm activation.