Security > 2-Factor Authentication

One of the ways that users put themselves at risk of cybercrime is with their choice of passwords or by saving their passwords to the device they are using. SimplePay has an option to have 2 layers of login security, called 2-Factor Authentication (2FA). This feature requires users to enter a verification code as an additional step when logging into SimplePay with their username and password. The verification code will also be required when trying to change the password for a username. The verification code is obtained from an authentication app that users will need to download.

Enabling 2-Factor Authentication

Users (i.e. each unique username/email address and related password) will need to enable 2-Factor Authentication for their login. To do this:

  • Go to the Profile icon > User Profile.
  • Under 2-Factor Authentication, click on Enable 2-Factor Authentication and enter your SimplePay password.
  • Follow the 3-step process shown on the screen:
  1. Download a 2-factor authentication app. 

Please note: The following 2-factor authentication apps are available:

Authy or Google authenticator for Android. Authy or Google authenticator for iOS and Microsoft Authenticator for Windows devices.

Please note: The app does not need to be downloaded onto the device that you will be using regularly. For example, you could download the app onto your mobile phone, but use your laptop to access SimplePay. Every time you log into SimplePay, you will need to have the device that has the app with you in order to get the verification code.

  1. Scan the QR Code using the authentication app.
  2. Enter the verification code generated by the app.
  • Click on Configure Recovery.
  • You will now be able to add a phone number for resetting purposes.
  • Click Send OTP once you have entered a phone number.

Please note: This phone number will only be used to send an OTP if you have lost access to your 2FA device and need to reset 2FA. We will not be using this phone number for any other purpose.

  • Enter the OTP sent to your phone.
  • Click Enable 2-Factor Authentication.

Click Download or Print to save the Recovery Codes.

Using Recovery Codes

If you don’t have the authentication app with you when trying to log in, you can use your backup/recovery codes to log in. The backup/recovery codes should have been saved to your computer or printed when enabling 2-factor authentication (see above).

Please note: You can only use each recovery code once.

Disabling 2-Factor Authentication

You can opt to no longer have 2-Factor Authentication enabled for your login. To disable this function:

  • Go to the Profile icon > User Profile.
  • Under 2-Factor Authentication, click on Disable 2-Factor Authentication.
  • Enter your SimplePay password.
  • Click Confirm.

Establish a Device as a Trusted Device

If you establish a device as a trusted device, you will only need to enter the verification code when logging into this device every 30 days. A verification code will be required with each login for devices that are not established as trusted. To set a device as trusted:

  • Go to the SimplePay login page on the device that you trust. Ensure that you are not logged in.
  • Enter your email address and password and click Login.
  • Enter the verification code from your device.
  • Select the checkbox Trust this device for 30 days.
  • Click Login.

Revoke Trust from a Device

If you revoke trust from a device, you’ll have to enter your verification code the next time you try to log in from this device. To revoke trust for a device:

  • Go to the Profile icon > User Profile.
  • Under Account Maintenance, click on Devices.
  • Click on Revoke Trust next to the device that you no longer trust.
  • Click Confirm.

2-Factor Authentication Reset

Should you lose access to your 2FA device, you will be able to reset your 2FA with an OTP sent to the phone number that you provided us with.

Please note: If you would like to capture a phone number and you have already enabled 2FA, you will first need to disable 2FA. After capturing the phone number you will need to re-enable 2FA by following the above-mentioned steps.

Please note: If you need to reset your 2FA but you have not captured a phone number when enabling 2FA, you will need to contact our Support Team for further assistance.

You are using the help system of SimplePay, a payroll system that simplifies the payroll process. Designed just for Hong Kong, it's a fully online solution. Read more.