Secure your Bokeping account

Your personal account protects every company you can open. Use your own sign-in rather than sharing credentials with a colleague or accountant.

Where to go: open your account menu at the top right, choose Profile, then open the Security tab. You may also reach the standalone Account & security page from a sign-in or company-access prompt.

In Account & security → Security, the equivalent controls are Set password (or the change-password control for an existing password) and Turn on beside two-factor authentication. In company settings, Your own two-factor authentication also opens this personal page.

Set or change your login password

In Login Password, follow the verification flow shown for your account. An account without a password shows Email me a code and Set login password; an existing password uses the change-password flow.

Use the requirements displayed below the password field. Review the sign-out notice: saving a new password signs you out on every device, including the current one. Be ready to sign in again with the new password.

If you forgot your password

1. Open Bokeping sign-in. From password sign-in, choose Use email code instead.
2. Enter your account email and choose Continue with Email. Use the latest verification code sent to that address.
3. Complete any required two-factor verification. Email sign-in does not remove that requirement.
4. Once signed in, open Security and follow the password-change flow there. Read the sign-out notice before saving.

There is no separate reset-password form in the current sign-in flow. If you no longer have access to the email or a required second factor, contact support for help with access instead of creating a replacement company.

Set up two-factor authentication

1. Find Two-Factor Authentication in the Security tab.
2. Choose Set up two-step verification.
3. Follow the setup instructions with your authenticator app.
4. Enter a current code to verify setup, then confirm that the status is enabled.
5. Keep any recovery information provided during setup somewhere secure.

Your company can require two-factor authentication for team access. External accountants must enable it before opening a company, even when that company’s team requirement is off.

If a code does not work

Check that you are using the correct Bokeping entry in your authenticator, that your device time is accurate, and that the code has not expired. An email-verification code and an authenticator code serve different steps; use the one the screen requests.

If you have lost access, contact support. Never include passwords, authenticator setup secrets, or recovery codes in a support message.

Review signed-in devices

On the standalone Security page, check Sessions & Devices and Recent security activity. Compare the device, time, and location information with your own activity. Sign out this device, a session’s Sign out, and Sign out others have different scopes; read the selected action before confirming it. Keep a working sign-in method before ending sessions.

For example, after using a shared computer, end that computer’s session rather than assuming closing its browser signed you out. Do not share session lists or security-event screenshots containing private account details in a public help request.