Appearance
Two-factor authentication
Two-factor authentication adds a second check at sign-in: your password, plus a six-digit code from an app on your phone. Every workspace in the portal requires it.
A new workspace has 21 days to get set up. After that, the workspace won't open until you do.
Please don't leave this to the last day
Setup takes about five minutes. Do it today and you won't think about it again.
Watch the setup
Prefer to see it done first? This walkthrough goes from the banner to your first code — including the iPhone Passwords app and Keeper — in under two minutes.
Why the portal requires it
Your workspace holds real information about real people: names, case notes, documents they've signed. A password on its own no longer protects that. Stolen passwords are cheap to come by, and AI has made phishing emails much harder to spot.
A second step closes the gap — someone with your password still can't get in without your phone. It's now the standard for organizations that handle client data, and funders and insurers increasingly ask for it. That's why there's no permanent way to opt out.
Before your deadline: the banner
Until you set it up, a yellow banner sits across the top of the portal.


Select Set up now to start. You can close the banner, but it returns at your next sign-in with a smaller number.
- A new workspace gets 21 days from the day it's created.
- An older workspace counts down to a date we set for it.
Admins can see the exact date at Workspace Settings → Security.
After your deadline
A window titled Two-factor authentication required covers the screen, offering Set up now or Sign out instead. Nothing else opens until you finish. Your work is safe and waiting — you just can't reach it until there's a code on your phone.
How you set it up
You'll need a free authenticator app on your phone. It takes about five minutes, once.
→ Set up your authenticator app
Lost your phone?
Nobody in your workspace can reset this — not even you. That's what makes the second step worth having. Ask your admin to contact Neffico support. We confirm who you are away from the portal, then clear the old setup so you can register a new phone.
Outside business hours that takes longer, which is why an app that backs up to the cloud is worth picking. A restored app puts you straight back in, no phone calls.
For workspace admins
The requirement can't be turned off. It applies to every workspace in the portal.