You can set up Two-Factor Authentication (2FA) so that any account user signing in to your partner impact.com account from an unsaved device will be required to log in via 2FA.
When you're invited to join an account and your sign-up method involves logging in with a username and password, you'll be automatically signed up for 2FA. Your default authentication method will be set to email. However, it is recommended that you use an authenticator app.
Note: When an account user has successfully been authenticated, their device is automatically saved as a trusted device— meaning they won’t need to use 2FA on subsequent sign-ins. Account users will only be asked to use 2FA again if their device has changed or if unusual activity was detected.
From the top navigation bar, select
![[User]](https://paligoapp-cdn-eu1.s3.eu-west-1.amazonaws.com/impact/attachments/f01cdffa431a4d75ff09c130b66974d4-ec4c7b9aa5792fe725406b280fb272b1.svg)
[User profile] → Settings. ![[Legacy tooltip]](https://paligoapp-cdn-eu1.s3.eu-west-1.amazonaws.com/impact/attachments/f01cdffa431a4d75ff09c130b66974d4-4887b2bb2e3a3c247d937c7ed256303e.svg)
Under General, select Account User Authentication.
On the Account User Authentication screen, select
![[Toggle on]](https://paligoapp-cdn-eu1.s3.eu-west-1.amazonaws.com/impact/attachments/f01cdffa431a4d75ff09c130b66974d4-84d1224fd3bb6ba94b899febe2021eaa.svg)
[Toggle on] Require users of this account to verify their identity upon login.Select Save.
This will enable a mandatory 2FA check for account users attempting a partner funds transfer above the transfer minimum amount — once authenticated, the PFT will go through.
From the top navigation bar, select
[User profile] → Settings. Under General, select Account User Authentication.
On the Account User Authentication screen, select
[Toggle] Require users of this account to verify their identity when initiating a partner funds transfer.Under Transfer minimum, input a value as the minimum amount to require 2FA.
Select Save.
From the top navigation bar, select
[User profile] → Edit Profile. Go to the Security section — next to Devices and Activity is a list of saved devices for the account.
Select Remove this device if you no longer access impact.com on that device.
Have questions about 2FA? Check our article on Two-Factor Authentication FAQs.