Boulevard has rolled out a set of login security changes:
staff sign in more often
a verification code is now required for billing and payment pages
more options for two-step verification setup:
authentication app instead of texted codes
admins can select which staff are required to have two-step verification set up (rolling out now)
receiving verification codes on international phone numbers (rolling out now)
Signing in more often
Why am I being logged out more often?
An account that stays signed in forever is an account anyone can walk up to and use. Requiring a fresh login limits how long a stolen password or an unattended screen can be used without anyone noticing.
How often will I need to sign in?
| Signed out | So you sign in… |
Dashboard (web) | Every night at midnight, local time | Each morning |
Professional App | Every Sunday night at midnight | Monday morning, then weekly |
Duo App | Never | — |
Can I turn this off?
No. It's a platform-wide security standard, not a per-business setting.
Was I signed out because something's wrong with my account?
No. A scheduled logout isn't an error and doesn't need to be reported. Sign back in and carry on.
→ Session duration and automatic logout — the full picture, including the separate inactivity timeout and how admins adjust both
Verification codes
Why have we added verification code requirements?
Attacks where a bad actor can redirect your business' hard-earned revenue to another bank account are on the rise. Also, security breaches are more common than ever. We've added additional friction to help reduce your business's risk of having valuable money or data stolen.
What are my options for receiving codes?
Two: a text message or an authenticator app on your phone.
Which should I pick?
A text message is simplest if you have a US or Canadian mobile number (+1) and reliable signal (and we are rolling out international number support now - reach out to support if you need this feature today). Choose the authenticator app if your line can't receive texts, or cell service is unreliable where you work.
⚠️ You can't switch later. Once you set up a method, changing it requires contacting Support to reset two-step verification — which also requires a password reset. Choose carefully.
Do codes expire?
Text message codes expire after 5 minutes. Authenticator app codes change every 30 seconds.
Which authenticator app should I use?
We recommend Google Authenticator — free, works on iPhone and Android, and is the app most Boulevard customers use. Microsoft Authenticator, Authy, 1Password, and Okta Verify also work.
→ How to set up an authenticator app — step-by-step, including which app to install and how to scan the QR code
My phone can't receive texts. What do I do?
Use an authenticator app. It doesn't receive anything — it generates codes on your phone, so it works on landlines, internet-based phone lines, international numbers, and phones with no signal at all.
Can I get codes by email?
No. If your email were compromised, codes sent there wouldn't protect your account.
Setting it up
Can I require two-step verification for all staff?
Yes — Manage Business > Security. All staff will be required to set it up, and everyone gets an email letting them know.
Can I require it for only specific users?
Yes, rolling out now: Admins and staff with the Manage staff login settings permission can require two-step verification for an individual staff member from their staff profile, or for a group of staff at once by filtering on Permission group or Location in Manage Business > Security. If two-step verification is required for you — whether business-wide or individually — you can't turn it off yourself; only an admin can remove the requirement.
We'd encourage anyone with Admin or Manager access to turn it on regardless — those are the accounts attackers want most.
I turned it off for my business. Why are staff still being asked for a code?
Once someone has signed in with two-step verification, their account keeps it until they turn it off in My settings. Turning it off business-wide doesn't remove it retroactively. You can also turn it off for staff by going to their staff profile or to the two step verification settings on the Manage Business > Security tab. (rolling out now)
→ Two-step verification: Admin Setup — full setup steps for admins
Billing and payment pages
Why am I being asked for a code just to open the billing page?
Separate from signing in, Boulevard requires a verification code before anyone can view or change:
Manage Location > Payment processing
Manage Business > Payment processing
Manage Business > Billing
One of the threats we actively defend against is an attempt to redirect payouts to a fraudulent bank account. A second step here means a stolen password alone isn't enough to move your money.
I'm an Admin. Why does this apply to me?
It's a protection on the page itself, not something a permission level exempts you from. Everyone who can reach those pages sees the prompt.
What if I enter the wrong code too many times?
You won't be locked out of your account. You just can't view or change those pages until a code goes through.
I haven't set up two-step verification yet.
You'll be walked through setting it up before you can access the page.
Trouble signing in
I didn't get my text message.
Check your signal and confirm your number under My settings > Profile > Personal information. Codes expire after 5 minutes — if a text arrives late, request a fresh one.
My authenticator app code was rejected.
Usually, the code changes as you type, or your phone's clock isn't accurate. Check out Logging into Boulevard and Login Troubleshooting for support
I have a new phone number.
Update it under My settings > Profile > Personal information. Text codes will go to the new number.
I got a new phone.
Text codes, same number: nothing changes. Codes arrive on your new phone.
Authenticator app: codes don't transfer. Contact Support, and we'll reset two-step verification. The reset signs you out of the Dashboard and Pro app and requires a password reset. You'll set it up again at your next sign-in.
I'm locked out and can't get a code at all.
Contact Support. We can reset two-step verification on your account using the process above.