Double takes security very seriously. We follow industry best practices and encrypt all data at rest and in transit.
Additionally, Double supports SMS-based Two-Factor Authentication (2FA) for both the Client Portal and for accountant users.
Enable 2FA for users (the bookkeeping team)
Practice settings
Admins can enable and disable 2FA settings for all users under Practice Settings.
Go to Practice Settings (⚙️ icon) > Manage Users
Make sure there is a phone number on file for the user
Check ✔️ 2FA
Users will be prompted to set up their 2FA upon login
They can choose:
2FA via an authenticator app (Double recommended), or
2FA via a text message authentication code
When users log in, they'll see "Select a 2FA verification method"
If a user cannot log in due to issues with 2FA, have them contact an admin on the bookkeeping team to disable this manually.
User settings
Once users log in to Double, they can also manage their 2FA settings manually under their User Settings.
Enable 2FA for client portal contacts
Before enabling 2FA for your contacts, make sure to confirm that
All contacts that need 2FA have a phone number listed and
The listed number can receive text messages
Practice settings
Activating 2FA settings for client portal contacts:
Go to your Practice Settings (⚙️ icon) > Client Portal
Select the Security tab
Check ✔️ Enable 2FA
Once you've selected "Enable 2FA" for the client portal, you can enable two-factor authentication for you contacts.
All contacts tab
Under the Practice Settings > Client Portal > All contacts tab, see a list of all client portal contacts and their existing 2FA settings.
Check "2FA" to enable 2FA settings for the contact.
Portal Settings
Within the client's close page, go to Portal Settings to enable or disable the 2FA settings for the contact.
Go to Portal Settings
Check the corresponding box in the 2FA enabled column
If non-admin users do not see an option to enable 2FA for the client portal contacts, ask an admin to check:
Has the 2FA setting been enabled under Practice Settings > Client Portal > Security?
If yes, try refreshing from the client list and going to the client's Portal Settings once more
If no, ask the admin to enable the setting first before going to Portal Settings
What does the two-factor authentication (2FA) text look like?
Users and clients will be prompted to enter an additional number from a text to sign in.
For clients, this will be in addition to using their magic link, Google SSO, or password.
Note: There is no MFA authenticator app option available for client portal contacts at this time, just text verification.