Enabling multi-factor authentication (MFA) on your account is an easy way to increase your account security, either for yourself, or if you’re an admin, your entire team. We recommend that all users enable MFA as a best practice. However, starting July 1, 2026, it is required for all Working Capital users with admin and payer roles. Read on to learn about how to enable MFA.
Setting up MFA on an individual account
To enable MFA:
Navigate to Settings > Security.
Under Multi-factor authentication, click Set up next to the method you want: App authentication (recommended) or SMS or voice call authentication.
Follow the on-screen prompts. You can choose to use an authenticator app (see options below) or SMS/voice call to complete setup.
External authenticator applications
Any trusted authenticator app should work, but here are a couple of options to explore:
These apps are available on both iOS and Android, and some also offer desktop or browser-based versions.
Requiring MFA for your team
If you're an Admin, you can require MFA for specific roles or all users on your team:
Go to Settings > Security.
Under the Team security section, open the Require MFA for team members list and choose Admins and payers or All team members.
Click Save, confirm, and enter a verification code.
Once enabled:
Team members who haven't set up MFA are signed out and emailed. They set up MFA when they next sign in, and they can't skip it.
On the Team page, you can view each user's MFA status to confirm who has completed setup.
As an admin, you must first enable MFA for your own account before you can require it for your team.
Note: If you or your team members log in using Google Authentication, MFA will also be enforced via Settle in addition to Google’s built-in security measures.
Resetting or disabling MFA
We recommend keeping MFA enabled to protect your account, but here’s how to manage it depending on your organization’s settings:
If MFA is not required by your business:
Navigate to Settings > Security
Click Delete next to your MFA method and confirm to turn off MFA. You will be prompted to enter a verification code from your active MFA method to confirm.
If MFA is required:
You cannot fully disable MFA. However, you can reset it by going to Settings > Security and clicking Delete next to your MFA method.
You’ll be logged out, and the next time you log in, you’ll be prompted to set up MFA again.
Still have questions? Reach out to our support team at support@settle.co—we’re happy to help!