Summary

This is where users can control and protect their accounts. It includes tools such as changing passwords, enabling extra security steps (such as two-factor authentication), reviewing login activity, managing devices connected to the account, setting recovery options, receiving security alerts, and controlling app access. These settings help keep personal information safe and prevent unauthorized access to the account.

Key Points

Enable Two-Factor Authentication (2FA) to add extra protection beyond a password
Choose the 2FA method that works best for you and your team
Ensure each user has a mobile number saved in their profile (if using SMS verification)
Set a session lifetime to automatically log users out after a set period of time
Use Login Hours to restrict access to your Fieldwork account outside of business hours
Require a One-Time Code and a User-Defined Password to keep your customer portal secure
Set secure portal links to expire after 7 days for extra security and convenience

How to Get to Account Security

From the top of the Navigation Menu, click Settings. (gear icon)

Under the heading Company Setup, click on Account Security

User Account Security

Two-Factor Authentication (2FA) :

Two-factor authentication (2FA) adds an extra step to the login process — after entering a password, the user receives a code to confirm their identity. This protects your account even if someone gets hold of a password.

Next, choose the option that works best for you and your team:

Disabled (Not Recommended). Only a password is needed to log in. This is the least secure option and is not recommended.
Good — Email Code After entering their password, the user receives a verification code to the email address on their account. They enter the code to complete the login.
Better — SMS Code After entering their password, the user receives a verification code via text message to the mobile number saved in their profile.
Note: Make sure each user has a mobile number saved in their profile for this option to work. If no mobile number is found, the code will be sent to their email instead.
Best — Authenticator App After entering their password, the user opens an authenticator app (Microsoft Authenticator or Google Authenticator) on their phone to get a code. This is the most secure option available.
Note: After saving this setting, your users will be walked through the setup process the next time they log in.

Session Lifetime

Controls how long your team stays logged in to Fieldwork before being asked to log in again. This helps prevent unauthorized access if someone forgets to log out.

Important: Any changes you make here will take effect the next time each user logs in.

Default - Users stay logged in until they close their browser. If a user selects Remember Me at login, they will stay logged in for up to 7 days.
Duration - Users are automatically logged out after a set amount of time. Choose what works best for you and your team:

12 hours
1 day
3 days
7 days

Login Hours - Restrict the hours during which your team can be logged in. Users will be automatically logged out outside of the time window you set. This is useful if you want to limit access to business hours only.

Portal Security

These settings control how your customers access your Fieldwork customer portal. Keeping your portal secure protects both your business and your customers.

Note: We strongly recommend enabling all of the security options below.

Require One Time Code via Email or Text (Recommended). Before accessing the portal, your customer will receive a one-time verification code by email or text. They enter the code to confirm their identity. This adds an extra layer of protection beyond just a link.

Require User-Defined Password: Your customers must create and enter a password to access the portal. This setting is always active and cannot be turned off.

Expire Secure Links After

When customers receive a link to access your portal, this setting determines how long the link remains active. Once the link expires, the customer will need to request a new one.

1 day
3 days
7 days (Recommended)
14 days
30 days

We recommend the 7-day option as the best balance between customer convenience and keeping your portal secure. Longer expiration windows are less secure.