Owners and managers set up two-factor sign-in the first time they sign in on the web: a 6-digit code each time they sign in, and backup codes to keep safe. Lost your phone? On the sign-in page, choose Lost your phone? for what to do.
In the phone app, open Me, tap your name, and turn on the app lock: Lock harulu with Face ID or a fingerprint, or Turn on app lock. The app then asks for your face, fingerprint or phone passcode when it opens, and after 2 minutes away. It works without signal.
Owners can turn on Require app lock for everyone in Settings, Security. Then nobody can turn it off, and a phone with no passcode can't open business data until one is set.
Owners can check who can sign in with Review access, from Settings, Security. It warns about anyone who hasn't signed in for over 90 days.
Think someone has got into your account? On the web sign-in page, choose "Think your account has been hacked?" We text a code to the mobile on your account, and entering it locks the account straight away. Security emails we send also have a link to lock it.
A locked account can't be used anywhere, and some changes to the business wait until it's unlocked. To unlock it, contact us. We check it's you first.
Still stuck? Send us a message.