In 2018, UltimateTax introduced multi-factor authentication for our UltimateTax Online and Online Check Printing (OCP) Products.
What is 2-Step Verification, and why is it important?
Two-step Verification is an additional security measure that increases security by sending users a one-time code that authenticates their identity and the device from which they are logging in. It adds a layer of protection more resilient than a password alone can provide.
A password is a single factor in the authentication process that verifies a user’s identity. 2-Step Verification requires a second factor in addition to the password as part of the authentication process. This requirement adds another layer of protection against hacking and fraud attempts. If a criminal hacks through your password layer, they'll still need your phone or access to your email account to get into your account.
With recent rises in tax-related identity theft and phishing attacks, thieves can take over the credentials of tax office staff or their clients to access confidential financial data, including tax returns, financial statements, and more. Simple passwords - or even complex passwords requiring various combinations of letters, numbers, and special characters - may not be enough to protect the sensitive firm and client data.
Which UltimateTax products are impacted and when?
2-Step verification will be in place for the upcoming tax season for the following products and services:
- UltimateTax Online
- Online Check Printing (OCP)
When will users need to log in with 2-Step Verification?
2-Step Verification will be optional for customers during tax season 2018. After choosing to enable this security enhancement, users will see changes in the following areas:
- During the log-in process
- From any new device or computer
- From any new web browser on a registered/trusted device
- After any password reset
Am I required to have 2-Step Verification Activated?
No, if you wish to disable the 2-Step Verification process on your account, it can be deactivated by logging into the Admin account and heading to "Administrator>Settings>Manage Users."
Does the code have to be entered every time I log in?
We do have an option that allows you to "Remember this Device." The Trust this device feature is suitable if you often use the same device and/or browser to access the website. It enables the system to remember (for 90 days) the particular device and/or browser you are using, so you do not have to go through the verification process every time you log in to the website. The next time you log in using that device and/or browser, you will bypass the 2-Step Verification page and, therefore, not have to enter a code. For security reasons, this feature works for 90 days for each device and/or browser you add. When the 90 days are up, you will need to go through the verification process once again.
