This article covers how to use Authenticator on your desktop computer, using Google Chrome as your browser, with the Authenticator app installed in Google Chrome.

Note: Please refer to Authenticator's terms and conditions, and iPayroll's Disclaimer Notice: Use of Third-Party Software or Websites.

First, You Need to Install This App in Google Chrome

Select the image below to install the app:

Once the Authenticator app is installed in Google Chrome, you can then set up two-factor authentication (2FA).

Go to:

• Time Sync Authenticator App
• Scan a QR Code
• Manually Enter a Time-Based Key
• Remove an Account

Time Sync Authenticator App

If you are unable to automatically sync your desktop computer to internet time, you can instead sync the Authenticator app to use Google's time.

1. In Google Chrome, open the Authenticator app.
   
2. Select the Cogwheel icon.
   The Settings menu is displayed.
3. Select Sync Clock with Google from the menu.
4. If the Authenticator has requested additional permissions pop-up appears, select Allow.
   A success pop-up appears.
5. Select Ok.

Now you are ready to scan the QR code.

Scan a QR Code

1. In Google Chrome, open the page that has the QR code you want to scan.
2. Open the Authenticator app.
   
3. Select the QR code icon in the menu bar.
4. Drag your mouse to cover the QR code and release the mouse.
   
   

   Note: If you can't already see the iPayroll Two Factor Authentication page with the QR code, in iPayroll, select your 'Logged in as your username' hyperlink at the top right of the page, next to the Logout, and select the Two Factor Authentication page.

   Note: The page with the QR code needs to be selected, and the Authenticator app must be  open from the same Google Chrome browser.
   Authenticator confirms the account has been added.
   Note: There is a known issue with Authenticator App where the QR code is not recognised. If the QR code is not recognised, you will need to manually create the account. See Manually Enter a Time-Based Key below.
5. Select OK.
6. In Google Chrome, open the Authenticator app again.
   You will now see the account in Authenticator. A 6-digit verification code, which is regenerated every 30 seconds, displays.
7. In iPayroll, on the Two Factor Authentication page, enter the 6-digit verification code in the Verification code field and select Confirm.
   Note: You need to select Confirm before the code regenerates.

Now, each time you log into iPayroll, after you have entered your username and password, you will enter the latest 6-digit code from your authenticator app.

Note: Authenticator indicates how many seconds are left before the code expires, showing a countdown clock, as well as changing the code to red to indicate 5 seconds remaining before the code expires. If you don't have time to enter and confirm the code, as there are not many seconds left, wait until the code regenerates and use the latest code.

Hint: Select the 6-digit verification code to copy it.

Note: The first time you select the 6-digit code to copy it, you are prompted to allow additional permissions to Authenticator. Select Allow to allow Authenticator to modify data you copy and paste, if you want to be able to copy the code.

Manually Enter a Time-Based Key

Manually create an account if you are unable to scan the QR code.

1. In iPayroll, select I can't scan the QR code to display the time-based key.
   
   The time-based key is displayed.
2. Select the key and copy it.

Now you are ready to manually add your iPayroll account.

1. In Google Chrome, open the Authenticator app.
   
2. Select the Pencil icon in the menu bar.
3. Select +.
4. Select Manual Entry.
   
5. In the Issuer field, enter 'iPayroll'.
6. In the Secret field, enter the 16-character time-based key or paste the time-based key from iPayroll.
   Note: The time-based key is under the QR code in iPayroll. In iPayroll, select I can't scan the QR code to display the time-based key.
   

   Note: If you can't already see the iPayroll Two Factor Authentication page, in iPayroll, select your 'Logged in as your username' hyperlink at the top right of the page, next to the Logout, and select the Two Factor Authentication page.

7. Select Advanced.
8. In the Username field, enter your account name (for example, your iPayroll username).
9. Leave the Period field blank.
10. Make sure the Digits field is set to 6.
11. Make sure the Algorithm field is set to SHA-1.
12. Make sure the Type field is set to Time Based.
13. Select OK.
    You will now see the account in Authenticator. A 6-digit verification code, which is regenerated every 30 seconds, displays.
14. In iPayroll, on the Two Factor Authentication page, enter the 6-digit verification code in the Verification code field and select Confirm.
    Note: You need to select Confirm before the code regenerates.

Now, each time you log into iPayroll, after you have entered your username and password, you will enter the latest 6-digit code from your authenticator app.

Note: Authenticator indicates how many seconds are left before the code expires, showing a countdown clock, as well as changing the code to red to indicate 5 seconds remaining before the code expires. If you don't have time to enter and confirm the code, as there are not many seconds left, wait until the code regenerates and use the latest code.

Hint: Select the 6-digit verification code to copy it.

Note: The first time you select the 6-digit code to copy it, you are prompted to allow additional permissions to Authenticator. Select Allow to allow Authenticator to modify data you copy and paste, if you want to be able to copy the code.

Remove an Account

1. In Google Chrome, open the Authenticator app.
   
2. Select the Pencil icon in the menu bar.
3. Select the Red Circle icon at the top left of the account you want to remove.
4. Select Yes to remove the account.
5. Select ✔ on the menu bar.