Two-factor authentication: what it means
DefinitionTwo-factor authentication, often called 2FA, requires a second proof of identity in addition to a password, usually a short code from a phone app or text message. It protects the account if the password is stolen, guessed or reused on a leaked site.
How it works in a service business
A scheduling account holds customer addresses, phone numbers and possibly payment links, so a stolen password is a real risk. A second factor makes the thief's job much harder. The tradeoff is convenience: a code at every login is a small annoyance, and a lost phone can lock you out. A common mistake is enabling it without saving the recovery codes in a safe place. Use an authenticator app where you can, since text messages can be intercepted or delayed. Turn it on for owner and office accounts first, because those hold the most power. Ask whether the product supports it for all users, and what the recovery path is if the owner loses a device.
Example
The office manager signs in with her password, then enters a six-digit code from an app on her phone. Without the phone, a stolen password alone does not open the account.
Where Apex touches this
Rolling out
The screen and the rules are built and tested. Saving real customer data is not connected yet. Status as of 2026-10-07; the badge shows the least-built feature involved.
- AD05Two-factor authentication(Rolling out)
- AD18IP allowlist / session controls(Rolling out)
Apex Flow Scheduler is in early access. See how we label status.