Securing Your LedgerSync Account: Two-Factor Authentication (2FA) Setup

Overview

LedgerSync supports two-factor authentication (2FA) on your main login using an authenticator app such as Google Authenticator, Microsoft Authenticator, or Authy. With 2FA enabled, signing in requires both your password and a time-based code from your phone — so even if a password is compromised, your account and your clients’ banking data stay protected.

How 2FA Works in LedgerSync

• 2FA uses authenticator-app codes (TOTP) — a 6-digit code that refreshes every 30 seconds on your phone
• Once enrolled, every login prompts for the code after your password
• 2FA is enrolled per user — each admin and employee sets up their own

How to Enable 2FA

1. Log into LedgerSync
2. Go to your account/profile settings and find the Two-Factor Authentication option
3. Click Enable 2FA — a QR code is displayed
4. Open your authenticator app (Google Authenticator, Authy, etc.) and scan the QR code
5. Enter the 6-digit code shown in the app to verify enrollment
6. 2FA is now active — you will be prompted for a code at each login

Important: Do not delete the LedgerSync entry from your authenticator app while 2FA is enabled — you will need each new code to log in. If you get a new phone, transfer your authenticator entries before wiping the old device.

Logging In with 2FA

1. Enter your username and password as usual
2. When prompted, open your authenticator app and enter the current 6-digit LedgerSync code
3. You’re in

Lost Access to Your Authenticator?

If you lose your phone or can no longer generate codes, contact support@ledgersync.com from your registered email address. The support team will verify your identity and help reset 2FA enrollment so you can re-enroll on a new device.

Who Should Enable 2FA?

We recommend 2FA for every user, and especially for firm administrators — admin accounts can see all clients, manage employees, and control bank connections. Many larger accounting firms now require 2FA on all staff logins as part of their security policy.

Related Articles:

• Describe LedgerSync’s Security
• Automatic Session Timeout

• Related Articles

• Describe Ledgersync's Security?

  Overview At LedgerSync, we prioritize security with robust measures to protect our clients’ data. Here is an overview of our security protocols. 1. User/Password Security LedgerSync does not store user/password information when using the Mastercard ...

• Ledgersync Compliance Documents

  Attached is a list of compliance documents and proof of insurance. Please hover over the document and download. Any questions please let maurice.berdugo@ledgersync.com know.

• LedgerSync API: Authentication & API Keys

  Overview Every request to the LedgerSync API must be authenticated with a secret key passed as a Bearer token. This article explains how API keys work, the difference between sandbox and live keys, and how to keep them secure. How to Authenticate ...

• How to set up the same bank login but split among two Ledgersync client accounts?

  Overview What happens when a client owns two business entities and both businesses share the same bank login? Most major banks do not allow the same login to be connected twice — they treat redundant logins as a potential security breach. LedgerSync ...

• I Have Been Locked Out of My Account – How Do I Regain Access?

  Purpose: LedgerSync accounts may occasionally become locked due to security protections or login issues. This guide explains why your account may be locked and provides step-by-step instructions to quickly restore access. Following these steps will ...