Skip to content
  • There are no suggestions because the search field is empty.

Multi-Factor Authentication (MFA) Coming to hh2 Mobile Apps

Learn about hh2’s new Multi-Factor Authentication (MFA) for mobile users. See what’s changing, when it’s rolling out, and what steps admins and users should take to prepare for a smooth login experience.

Overview

To strengthen account security, hh2 is introducing Multi-Factor Authentication (MFA) across our mobile apps — hh2 Time Tracking (formerly Remote Payroll) and hh2 AP Payments (formerly Document Flow).

When MFA is enabled, users will verify their login with a one-time code sent to their email or phone. This added step helps protect user accounts and company data from unauthorized access.

When MFA Is Rolling Out

MFA will roll out gradually beginning in November 2025 for both mobile platforms.

  • Android & iOS — Time Tracking: November rollout

  • Android & iOS — AP Payments: MFA rollout will align with Time Tracking

Dates shown are approximate. We’re prioritizing thorough testing to ensure a smooth experience for all users and minimal disruption during the rollout.

What Users Will See

When MFA is enabled, users logging in will be prompted to select a verification method — email or SMS (if a phone number is listed). They’ll receive a code and enter it before accessing the app.

  • Users can resend the code if needed (once per minute).

  • Codes must be entered within 15 minutes or the login will restart.

  • Users can switch between email or SMS if they selected the wrong method.

  • Once verified, users remain logged in and will not need to re-enter MFA credentials unless they log out or change devices.


MFA 2

What Admins Should Do Before MFA Launches

To ensure all users can log in successfully once MFA is enabled:

  1. Verify that each user’s email address and phone number are up to date in User Setup.

  2. Remind all users to update to the latest version of their hh2 app before MFA goes live.

  3. Encourage users to log in at least once before rollout so active sessions remain valid during the transition.

Need Help?

If you or your team experience any login issues after MFA is live, please contact hh2 support. Our team will assist in verifying user information and helping you regain access quickly.