HirePOS offers multiple sign-in methods to help protect your account and business data. Some methods provide stronger protection than others.

The following sign-in methods are listed in order from most secure to least secure.

Available providers: Microsoft and Google

⏳Coming Soon: Xero SSO

Single Sign-On allows you to sign in to HirePOS using your existing Microsoft, Google or Xero account. Authentication is handled directly by the identity provider, allowing you to benefit from their advanced security features.

• Highest level of security available in HirePOS

• Uses the security features of Microsoft, Google or Xero

• Supports advanced protection features such as phishing resistance, device trust and risk-based authentication

• No additional HirePOS password to remember

• Simplified user management

All users, particularly businesses using Microsoft 365 or Google Workspace.

If your user account is set to use Single Sign-On, you must continue signing in with the connected provider, such as Microsoft, Google or Xero.

When SSO is enabled for your user account, other sign-in methods such as HirePOS password sign-in, authenticator app codes, and email verification codes are not used for access.

If you are unable to sign in with your SSO provider, check with your internal Microsoft, Google or Xero administrator, or contact HirePOS Support if you need further assistance.

Supported apps: Microsoft Authenticator, Google Authenticator and compatible authenticator applications

Authenticator apps generate a unique six-digit verification code on your mobile device every 30 seconds. After entering your email address and password, you enter the current code displayed in your authenticator app to complete sign-in.

• Strong two-factor authentication

• Verification codes are generated on your device

• Does not rely on Email or SMS delivery

• Works even when you are offline

• Faster sign-in than email verification codes

• Protects against password theft

Users who do not use Single Sign-On but want stronger account protection.

1. Sign in with your HirePOS email address and password.

2. Open your authenticator app.

3. Enter the current six-digit verification code.

4. Access your HirePOS account.

Authenticator app codes only work from the exact device and authenticator app used when the sign-in method was first set up.

Installing an authenticator app on another phone, tablet, or computer will not automatically give you access to the same HirePOS sign-in codes.

If you no longer have access to the original phone or authenticator app, contact HirePOS Support. You may need to confirm your identity and authority before access can be changed.

Email-based two-factor authentication provides an additional layer of protection by sending a one-time verification code to your registered email address.

After entering your email address and password, HirePOS sends a six-digit code to your inbox. The code must be entered before access is granted.

HirePOS does not recommend SMS verification codes because SMS can be vulnerable to risks such as SIM-swap attacks, mobile number porting fraud, mobile account compromise, message interception, phishing, and loss of access to the phone number.

• More secure than password-only sign-in

• Easy to use

• No additional mobile app required

• Helps prevent unauthorised access if a password is compromised

• Depends on email delivery

• Can be slower than authenticator apps

• Security depends on the security of your email account

1. Sign in with your HirePOS email address and password.

2. Check your email inbox.

3. Enter the six-digit verification code.

4. Access your HirePOS account.

Email verification codes should usually arrive immediately.

If you have not received the code:

1. Check that you entered the correct email address on the sign-in screen.

2. Make sure the email address belongs to a real inbox you can access.

3. Check your junk, spam, clutter, or quarantine folders.

4. Check whether any email forwarding rules or inbox rules have moved the email to another folder.

5. Try resending the verification code.

If the code still does not arrive, contact HirePOS Support for assistance.

This is the traditional sign-in method using only an email address and password.

HirePOS requires passwords to meet minimum security requirements, including a minimum length of 12 characters.

• Simple and familiar

• No additional setup required

• Provides only a single layer of security

• More vulnerable to password theft, phishing and credential reuse attacks

• Does not provide the additional protection of two-factor authentication

⚠️ Password-only sign-in is considered the least secure authentication method available in HirePOS and will be progressively phased out in favour of stronger authentication methods.

Users are encouraged to migrate to either:

• ✅ Single Sign-On (Microsoft, Google or Xero), or

• ✅ Authenticator App (TOTP) authentication

as soon as possible.

Changing your HirePOS password does not change the sign-in method assigned to your user account.

If your account is required to use Single Sign-On or another two-factor authentication method, resetting your password will not let you bypass that requirement. Sign in using the method required for your account.

Use the Forgot Password link on the HirePOS sign-in screen.

Follow the instructions sent to your registered email address to reset your password. After resetting your password, you may still need to complete any required two-factor authentication or SSO sign-in steps.

For the strongest account protection, HirePOS recommends the following order of preference:

1. 😁 Single Sign-On (Microsoft, Google or Xero)

2. 🙂 Authenticator App (Microsoft Authenticator or Google Authenticator)

3. 😐 Email Verification Codes

4. 😡 Password Only (Legacy)

Using a stronger authentication method helps protect your account, your business data and your users from unauthorised access.