Passkeys and two‑factor authentication (2FA) make it much harder for attackers to break into your MYOB account, even if they get hold of your password. There are four ways you can protect your account:
passkeys (recommended as your main account security method) work with a quick check on a device you trust. They keep signing in simple while helping protect your account from stolen credentials, lockouts and fraud.
via an authenticator app (recommended as a primary 2FA method) on a mobile device (phone, tablet, etc.) – your 2FA code displays in the app
via SMS (recommended as a backup 2FA method) – your 2FA code is sent to your mobile phone via text message
via email (not recommended) – the code is sent to the email address linked to your MYOB account. Only available if you set it up when you first set up 2FA.
Email 2FA is our least secure option and we’ll be phasing it out in 2027. If you’re using email 2FA we recommend switching to passkeys and app 2FA with SMS 2FA as a backup 2FA option.
Use passkeys as your main method with 2FA as a backup
For the strongest security and simplest method to verify your identity, we recommend you set up and use passkeys. A passkey is an alternative to signing in with a password and 2FA. You don’t necessarily need to complete a 2FA check after signing in using a passkey (but 2FA must still be set up and you may still be prompted to enter a 2FA code in some situations, like when you change your security settings).
To avoid lockouts and give you more sign-in options, you should set up multiple passkeys:
on different devices, like your laptop and phone
in a cross-platform password manager, like 1Password
in an account-based password manager, like ICloud Keychain or Google Password Manager
That way, you can sign in to your account if you lose access to a device. Setting up multiple 2FA methods, like app 2FA for your primary 2FA method with SMS 2FA as a backup, can you give you additional sign-in options.
Compare passkeys and 2FA methods
2FA Method | Passkeys | Authenticator App | SMS | Email |
|---|---|---|---|---|
Security level | High – Someone would need both your device and your unlock method to get in. | High – codes stay on your device, hard to intercept. | Medium – safer than email. | Low – inboxes are easy targets for scams. |
How your identity is verified | You sign in via a secure sign-in key saved to your device or password manager. | 2FA code generated in‑app, never sent by SMS or email. | 2FA code sent as text messages over the mobile network. | 2FA code sent over the internet to your email inbox. |
Works without internet | Yes – only requires the device you’ve set the passkey up on. | Yes – app generates codes offline. | Yes –needs mobile reception. | No – needs internet and inbox access. |
Works overseas | Yes – works anywhere you have your device or can access your password manager. | Yes – works anywhere once set up | Yes – if your mobile plan supports international SMS | Yes – if you’re online and can reach email |
What you need | A passkey compatible browser and device on an operating system that supports passkeys. | A smartphone or tablet with an authenticator app | A mobile that can receive texts | Access to your MYOB sign‑in email and internet |
Supports account recovery | Yes – if your passkey is on multiple devices or in a password manager, you can still sign in another way. | Yes – works with SMS and a recovery code for more options. | Yes – keep your number and codes follow you to new devices. | Limited – if your email is hacked, attackers may get your codes. |
Availability | Available to all MYOB users. | Available to all MYOB users. | Available to all MYOB users. | Only for users who chose it when first setting up 2FA – can’t be added later. |
Ease of use | You just need your device to use it | You just need your device to use it | Quick and familiar as it uses text messages | Easy to use, but emails can get lost in spam folders |
Recommended use | As your primary account security and sign in method. | As your main 2FA method. | As a backup 2FA method. | Not recommended – email 2FA will be phased out in 2027. Use passkeys as your main account security method. If you want to use 2FA, use app 2FA, with SMS as a backup method. |
You can also save a single‑use recovery code as an extra backup if you ever lose access to your usual 2FA method.