Keep your Oogle account secure

Your client portal account controls your invoices, payment methods and support requests, so it's worth five minutes to protect it. Use a password you don't use anywhere else, turn on two-factor authentication, give other people their own login instead of sharing yours, and check that emails are genuine before you act on them.

1. Use a unique password

A password that's used on another website is only as safe as that website. If it leaks there, people will try it here.

To set a new one, use Reset My Password on the sign-in page and follow the link we email you to the Confirm Password Reset page. Step by step: Reset a forgotten password or username.

A password manager makes long, unique passwords easy to use, because you don't have to remember them.

2. Turn on two-factor authentication

With two-factor authentication on, signing in needs your password and a six-digit code from an app on your phone.

1. Open Manage Account → Authentication.
2. Tick Enable Two-Factor Authentication.
3. Scan the QR code with an authenticator app, such as Google Authenticator, Microsoft Authenticator or 1Password.
4. Enter the One Time Password (As shown in your Authenticator).
5. Select Update My Information.

Full steps: Turn on two-factor authentication.

3. Don't share your login

If a colleague, bookkeeper or assistant needs access, give them their own instead of your password.

• Managers lets you invite someone to manage your account with their own login. You choose what they can see and do.
• Contacts adds people to your account, such as a bookkeeper who should know about invoices.

See Add contacts and invite someone to manage your account. When someone leaves your business, remove their access, or ask us to in a Billing & Account ticket.

4. Be careful on shared computers

• Leave Remember me on this computer unticked on a shared or public computer.
• When you're done, open the account menu (your name, at the top of the page) and select Log Out.

5. Check emails before acting on them

Real portal emails come from addresses ending in @my.oogle.net, and links go to my.oogle.net or oogle.net. If a message asks for a password, a code or payment details, it isn't from us. When in doubt, sign in by typing my.oogle.net yourself, and compare against Email History. See How to recognize an official Oogle message.

Don't forget your website login

Your WordPress administration has its own login, separate from the portal. Use a different strong password there too, and remove WordPress users who no longer need access. These steps reduce risk; no setting removes it completely.

You'll know it worked when

Signing in asks for a One Time Password after your password, the people who help you have their own logins under Managers, and no one else knows your password.

If something goes wrong

• You've lost the phone with your authenticator app. Contact us. We'll verify it's you before turning two-factor authentication off.
• You think someone else has your password. Change it now, turn on two-factor authentication, and tell us in a Billing & Account ticket.
• You see a manager or contact you don't recognize. Tell us in a Billing & Account ticket straight away.

Next steps

• Can't access something? Account, contact and permission problems
• What to include in a ticket, and what never to send