Preparing for MFA rollout if you have users who do not have access to an authenticator app

The MFA rollout is happening on Wednesday 28th October 2026.

If you have users who do not have the capacity to access an authenticator app, then this is the actions we strongly advise you to take before that date.

Complete these steps in order:

1. Add your warehouse or main location’s IP address to the authorised list, then add company-wide IP restrictions by adding your IP to the ‘Existing IP Addresses’ list for your account.
   
   Settings > Security > IP Addresses and Locations
   Add a location description
   Switch ‘Enable IP Address Checks – Online, Mobile and REST API’ to 'YES'
   
    
2. Switch 'Enable Multi-Factor Authentication for all users' to 'YES'.
   
   Settings > Security > Authentication Settings
   
    
3. For each user who should log in without MFA, switch 'Can this user ignore multi factor authentication?' to 'YES'.
   Settings > Company > Users
   Select appropriate user
   > User Permissions
   
   Click ‘Save’
    

This will ensure that users exempt from MFA should remain subject to IP restrictions, so they can only log in from your authorised locations.

If you have completed these steps before the rollout, we will retain your existing settings and will not override them when MFA is rolled out.