How do I opt in to two-factor authentication?

Two-factor authentication (2FA) is an extra layer of security for your account that makes it more difficult for an unauthorized user to access your account.

When you sign in to Brex with two-factor authentication enabled, you will receive a prompt for a code in addition to your password. Brex offers two ways to receive a code:

We recommend using an authentication app because it’s more secure than SMS and does not require a working cell network or internet connection.

Please read the relevant section below to learn more about setup instructions for each one.

First, download one of the authentication apps below.

After you have the app, please ensure that your device's date and time settings are configured to 'automatic' mode. Google Authenticator and Authy generate 2FA codes using the current time on your device so if the time is set incorrectly, the wrong code will be generated.

Next, follow these steps to set it up with Brex.

Step 1: Go to Settings in your Brex dashboard

Step 2: In the Personal tab, find Two-factor authentication and click Set up

Step 3: Choose Authentication app and click Continue

Step 4: Open your authentication app and use it to scan the QR code, then click Continue

Step 5: If you aren’t able to scan the QR code, choose manual entry on your app, and enter the code shown on the screen

Step 6: Enter the 6-digit code from your authentication app and click Continue (the code will typically expire after 30 seconds)

Step 7: Copy or download the backup codes and save them in a secure place, then click Continue

That’s it! Once 2FA is enabled , it cannot be disabled. If you ever lose your phone, you can use your backup codes to sign in to Brex. Each backup code can be used once.

To set up SMS authentication, follow the steps below.

Step 1: Go to Settings in your Brex dashboard

Step 2: In the Personal tab, find Two-factor authentication and click Set up

Step 3: Choose Text Message and click Continue

Step 4: Enter the phone number you want your code sent to and click Continue; the phone number you enter will replace any existing phone number on your account and will also be used for customer communications and fraud prevention

Step 5: Enter the 6-digit code sent to your phone number and click Continue (the SMS code will typically expire after 3 minutes)

That’s it! Once 2FA is enabled, it cannot be disabled. If you need to update your phone number, please read How do I change the phone number associated with two-factor authentication?

To change your 2FA method, follow these steps:

Step 1: Go to Settings in your Brex dashboard

Step 2: In the Personal tab, find Two-factor authentication and click Change

Step 3: Choose your new authentication method and click Continue

Step 4: To finish setup, follow the instructions in this article for your new method, beginning with step 4