Two-factor authentication (2FA) is an extra layer of security for your account that makes it more difficult for an unauthorized user to access your account.
How it works
When you sign in to Brex with two-factor authentication enabled, you will receive a prompt for a code in addition to your password. Brex offers two ways to receive a code:
- Authentication app (Google Authenticator or Authy)
- SMS text message
We recommend using an authentication app because it’s more secure than SMS and does not require a working cell network or internet connection.
Please read the relevant section below to learn more about setup instructions for each one.
Authentication app setup
First, download one of the authentication apps below.
After you have the app, please ensure that your device's date and time settings are configured to 'automatic' mode. Google Authenticator and Authy generate 2FA codes using the current time on your device so if the time is set incorrectly, the wrong code will be generated.
Next, follow these steps to set it up with Brex.
Step 1: Go to Settings in your Brex dashboard
Step 2: In the Personal tab, find Two-factor authentication and click Set up
Step 3: Choose Authentication app and click Continue
Step 4: Open your authentication app and use it to scan the QR code, then click Continue
Step 5: If you aren’t able to scan the QR code, choose manual entry on your app, and enter the code shown on the screen
Step 6: Enter the 6-digit code from your authentication app and click Continue (the code will typically expire after 30 seconds)
Step 7: Copy or download the backup codes and save them in a secure place, then click Continue
That’s it! Once 2FA is enabled , it cannot be disabled. If you ever lose your phone, you can use your backup codes to sign in to Brex. Each backup code can be used once.
SMS text message setup
To set up SMS authentication, follow the steps below.
Step 1: Go to Settings in your Brex dashboard
Step 2: In the
Personal tab, find
Two-factor authentication and click
Set upStep 3: Choose
Text Message and click
ContinueStep 4: Enter the phone number you want your code sent to and click
Continue; the phone number you enter will replace any existing phone number on your account and will also be used for customer communications and fraud prevention
Step 5: Enter the 6-digit code sent to your phone number and click
Continue (the SMS code will typically expire after 3 minutes)
That’s it! Once 2FA is enabled, it cannot be disabled. If you need to update your phone number, please read
How do I change the phone number associated with two-factor authentication?
Changing your 2FA method
To change your 2FA method, follow these steps:
Step 1: Go to Settings in your Brex dashboard
Step 2: In the Personal tab, find Two-factor authentication and click Change
Step 3: Choose your new authentication method and click Continue
Step 4: To finish setup, follow the instructions in this article for your new method, beginning with step 4