Introduction
Two-factor authentication (2FA) protects your Ledgy account with a second step when you log in: a 6-digit code from an authenticator app on your phone. Even if someone gets hold of your password, they can't get into your account without that code.
You can turn on 2FA yourself at any time, and some companies make it mandatory. This article shows you how to set up 2FA, how to log in with it, and what to do if you lose your phone or switch to a new one.
Are you a company admin? To make 2FA mandatory for everyone in your company, see How do I require two-factor authentication (2FA) for my company?
Why am I being asked to set up 2FA?
If you see the message "You have been required to enable Two-Factor Authentication by [company name]" when you log in, that company has made 2FA mandatory for everyone with access to it in Ledgy. You may also have received an email letting you know.
Follow the steps in How to set up 2FA below to continue. If you're not ready yet, you can log out from the pop-up and come back later. You'll see the same prompt the next time you log in.
Note: If you log in with Google or with your company's single sign-on (SSO), you won't see this prompt. Your login security is handled by Google or your company's identity provider instead.
How to set up 2FA
Before you start
Download an authenticator app on your phone. Compatible apps include:
Note: You need a password on your Ledgy account to use 2FA. If you see "To enable, please set up a password first" instead of the 2FA toggle, click Add password in the same section and follow the link in the email we send you.
Set up 2FA step by step
If you're already seeing the required 2FA pop-up, skip to step 3.
In Ledgy, click your name in the bottom-left corner and select Account settings.
Under Login settings, turn on the Two-factor authentication toggle.
Scan the QR code with your authenticator app.
Enter the 6-digit code your app shows. Codes change every 30 seconds, so enter the current one.
Save your recovery code somewhere safe, such as a password manager.
Important: Your recovery code is the fastest way back into your account if you lose your phone. Only you can see it. Your company's admins and Ledgy Support can't. Don't store it somewhere unsecured, such as a plain text file.
Optional: Add a recovery email
A recovery email lets you get a one-time login code by email when your phone isn't with you. You can add or change it at any time once 2FA is on.
Click your name in the bottom-left corner and select Settings.
Under Login settings, find Two-factor authentication.
Next to the recovery email, click Add (or Change).
Enter an email address that's different from your Ledgy login email, then click Save.
Note: A recovery email doesn't replace your recovery code. Keep your recovery code stored safely as well.
How to log in with 2FA
Enter your email and password as usual.
Enter the 6-digit code from your authenticator app.
Log in with a code sent to your recovery email
If your phone isn't with you and you've added a recovery email:
On the code screen, click Use email code.
Click Send code to recovery email. Ledgy shows a masked version of the address the code goes to.
Enter the 6-digit code from the email.
Note: The email code expires after 10 minutes. Click Resend code if you need a new one. The Use email code link only appears if you've added a recovery email.
What if I lose access to my authenticator app?
Pick the first option that applies to you:
You added a recovery email: Log in with a code sent to your recovery email. Nothing gets reset.
You have your recovery code: Reset 2FA with your recovery code.
You have neither: Verify your identity to reset 2FA.
Reset 2FA with your recovery code
On the code screen, click Use recovery code, or click the Reset 2FA button below.
Enter your Ledgy login email, your password and your recovery code.
Click Reset 2FA.
You'll see a success message and get an email confirming that 2FA is turned off for your account. Next, log in and set up 2FA again.
Verify your identity if you've lost your recovery code
Go to the Reset 2FA page, or click Use recovery code on the login screen.
Click Verify your identity instead.
Enter your Ledgy login email and password, then click Send verification email.
Open the link in the email on your phone and follow the steps to verify your identity with a valid government-issued ID.
Before you start the verification:
Have your phone and a valid government-issued ID ready.
The link expires if you don't use it within 48 hours.
The link only works once. After you open it, you can't open it again.
Once you start, you have 1 hour to finish in one sitting. If you close the browser tab or run out of time, you'll need a new link.
What happens after you verify
You'll get one of three emails:
Reset successful: You can now log in with your email and password.
Verification failed: Please contact our Support team.
Under review: Our team will check your identity and reset your 2FA manually.
Log in and set up 2FA again after a reset
Go to app.ledgy.com and log in with your email and password.
If your company requires 2FA, you'll be asked to set it up again straight away. Follow the steps in Set up 2FA step by step.
If your company doesn't require 2FA, we recommend turning it back on in Settings > Login settings.
Note: If you log in with Google, you won't be asked to set up 2FA. To use Ledgy's 2FA instead, remove the Google login under Settings > Login settings, log out, and log back in with your email and password.
How do I move 2FA to a new phone?
The steps depend on whether any of your companies requires 2FA.
If 2FA is not required
Click your name in the bottom-left corner and select Settings.
Under Login settings, turn off the Two-factor authentication toggle, then turn it on again.
Scan the new QR code with the authenticator app on your new phone and follow the setup steps.
Save your new recovery code. Your old one no longer works.
If 2FA is required by one of your companies
You can't turn 2FA off yourself. The toggle is greyed out and shows "Can't be disabled because at least one of your companies has required you to have two-factor authentication enabled".
Instead, reset 2FA with your recovery code. When you next log in, you'll be asked to set up 2FA again, and you can scan the QR code with your new phone.
FAQs
Why do I get an "invalid code" error?
Wait for a fresh code: Codes refresh every 30 seconds. Wait for a new one to appear, then enter it straight away.
Remove old Ledgy entries: If you set up 2FA before, your app may still show an old Ledgy entry. Delete old entries and scan only the most recent QR code.
Check the account: If you have several accounts in your app, make sure you're copying the code from the right Ledgy entry.
Try another browser or app: Chrome and Google Authenticator work best.
On an iPhone: The phone's clock may be out of sync. Go to Settings > General > Date & Time, turn on Set Automatically, delete old Ledgy entries from your app, scan the most recent QR code, and enter the new code.
I deleted my authenticator app by accident. What now?
You can't generate codes until you set up 2FA again. Log in with your recovery email if you added one, or reset 2FA with your recovery code or by verifying your identity. Then reinstall the app and set up 2FA again.
Can my company's admins see or reset my 2FA?
No. Admins can't see your recovery code and can't reset your 2FA. Only you can reset it, with your recovery code or by verifying your identity. If neither works, contact Ledgy Support.
I'm in more than one company. Why can't I turn 2FA off?
If at least one of your companies requires 2FA, it stays on for your whole Ledgy account, including when you work in your other companies.
Still stuck? Contact our Support team via chat or email with a description and a screenshot of the error, and we'll help you sort it out.