Forum Discussion

JoanneMcG's avatar
JoanneMcG
Trusted Cover User
2 years ago

No security in Myob today

Hello Myob - why is there no security in Myob today???? All our staff were able to open file without having to log in - I also didn't need to log into this Forum This is not acceptable Myob - why b...
  • JoanneMcG's avatar
    JoanneMcG
    2 years ago

    I have come in this morning and this is how it went:

    Open Myob, click to log in and I am automatically taken to the screen showing the active file - I was not required to log in, provide a password let alone any 2FA.  I also came to this forum page.  Again, I clicked to log in and I was immediately brought to this site without any login required.

    The normal way to log in, even if 'tick for 30 days' was ticked, is to use email address and password - these two key steps were not there, it was straight into the file (and forum site).   Considering that I logged out of the company file prior to leaving work yesterday means that there is something wrong with the file.

    This is not normal nor acceptable.  It pretty much implies that there is no security in our company file.

    I need Myob to look into this as a matter of urgency.

     

    Update:  so pretty much over this whole issue, don't worry about Myob, we will look for a new solution to our accounting needs.

     

Isaiah_C's avatar
Isaiah_C
MYOB Moderator

Hi All,

 

Thank you for your posts and for letting us know your concern. I'm sorry to hear that you feel your account is not secured. I'll be more than happy to help you with this. I want to know if it's an online or offline file.

 

  • The AccountRight Live login: This is your my.myob account details (your email address and password). If you're signed in, you will not be prompted for this log-in (email address and password), and you're automatically signed into the company file once you select it.
  • The company file login: this is your User ID and password. If you've linked your user ID to your my.myob account through Setup >> User Access, this would skip the User ID and password screen. To make sure you are totally signed out, you need to go to Services>>Sign out of AccountRight Live. This will close the file, and once you select the company file again, it will ask for your email address, password, and 2FA code. If it's the company file sign on, then you'll need to check the set-up of your user ID.

 

 

Please let me know if you need further help.

 

Kind regards,

Sai

JoanneMcG's avatar
JoanneMcG
Trusted Cover User
2 years ago

I think you are missing the point - 2FA is in place in our company file, no access was updated or amended - it was simply a case of during the opening of the file this morning there was no 2FA in place.  This is a Myob issue, not a user issue.

If nothing was changed in our company file (I was last to use on Friday, and first to use this morning) how can the 2FA not be working.  That is the question Myob needs to answer.

Also, I have come home from work to work in Myob - again I didn't need any authentication to get into the file.

As stated, to "log in" to the forum this morning no 2FA was required either.

Why?  Where is our security Myob?  How can this happen to me, and other unrelated Myob users (those that put posts up)?

  • Isaiah_C's avatar
    Isaiah_C
    MYOB Moderator
    2 years ago

    Hi JoanneMcG,

     

    Thank you for the response. In this case, the reason you are not being asked to put the 2FA because you tick the box that says, 'Trust this device for 30 days'. You don't need to enter the code once you tick that box. You can clear the 'Trust this device' setting by signing out to AccountRight (Service>>Sign out from AccountRight).  Trust this device for 30 days, has detailed information and instructions to assist you with this.

     

     

    Please let me know if you need further help.

     

    Kind regards,

    Sai

    • JoanneMcG's avatar
      JoanneMcG
      Trusted Cover User
      2 years ago

      Again, you don't have this right.  To access our file we log in by email adress, then we get our authentication code via email (or in my case I use google authenticator) ie 2FA.  We do not use 'ok for 30 days' ever, so all staff have to get the email code.

      Today, upon opening Myob, all staff here went to open the file and it automatically took each of us in without asking for any authentication.

      I went onto the Forum to lodge my first message, it also did not ask me for authentication.  Maybe I had ticked the 30 days on the Forum page from a previous session but the company file, for all users, 2FA is always required.

      Other people have stated that they had the same issue in this thread, so the issue is not limited to my company file only.

      So I ask again, why has this happened, and what will you do to fix this issue?

    • JoanneMcG's avatar
      JoanneMcG
      Trusted Cover User
      2 years ago

      I have come in this morning and this is how it went:

      Open Myob, click to log in and I am automatically taken to the screen showing the active file - I was not required to log in, provide a password let alone any 2FA.  I also came to this forum page.  Again, I clicked to log in and I was immediately brought to this site without any login required.

      The normal way to log in, even if 'tick for 30 days' was ticked, is to use email address and password - these two key steps were not there, it was straight into the file (and forum site).   Considering that I logged out of the company file prior to leaving work yesterday means that there is something wrong with the file.

      This is not normal nor acceptable.  It pretty much implies that there is no security in our company file.

      I need Myob to look into this as a matter of urgency.

       

      Update:  so pretty much over this whole issue, don't worry about Myob, we will look for a new solution to our accounting needs.

       

      • Isaiah_C's avatar
        Isaiah_C
        MYOB Moderator
        2 years ago

        Hi JoanneMcG,

         

        Thank you for the response and I sincerely apologize for the inconvenience it may have caused. You can try the steps that I have provided, and you can also try to clear the cache of your browser and let me know how it goes.

         

         

        Please let me know if you need further help.

         

        Kind regards,

        Sai

Looking for something else?

Search the Community Forum for answers or find your topic and get the conversation started!

Community home

Dig into MYOB Academy for free courses, learning paths and live events to help build your business with MYOB.

 

Related content