25% offOctober sale: 25% off monthly plans for your first 3 months, taken off automatically at checkout. 15 days left · ends 31 OctoberSee sale prices

Two-step login

Protect your account with a code from your phone as well as your password.

What it is

With two-step login, logging in needs your password and a 6-digit code from an app on your phone. The code changes every 30 seconds, so someone who finds out your password still can't get in.

It's optional for customers, but we strongly recommend it. RotaProof's own admin accounts must use it.

Turning it on

  1. In RotaProof, click Account & security in the menu.
  2. Click Turn on two-step login.
  3. On your phone, install an authenticator app if you don't have one, such as Google Authenticator or Microsoft Authenticator.
  4. In the app, add a new account and scan the picture RotaProof shows. If you can't scan it, type in the key shown under the picture.
  5. Type the 6-digit code the app shows and click Turn on.
  6. Save your recovery codes. Print them or put them in a password manager. They're only shown once.

Logging in

Enter your email and password as usual. RotaProof then asks for your code: open the app and type the code shown for RotaProof.

Lost your phone?

  • Type one of your recovery codes instead of the 6-digit code. Each one works once.
  • Once you're in, go to Account & security to turn two-step login off and on again with your new phone, or to make new recovery codes.
  • Lost your recovery codes too? Ask an admin at your company to reset your two-step login from their Team page. See managing your team.

This guide explains how to use RotaProof. It isn't legal advice. For the rules themselves, the Home Office's employer's guide to right to work checks is the final word.