Two-step Verification Requirement

Overview

BetterUnite is making two-step verification (also called multi-factor authentication, MFA or 2FA) a requirement for everyone who signs in to manage an organization. With it on, signing in takes your password plus a quick second step, such as a passkey on your phone or computer, a code from an authenticator app, or a text message.

Your BetterUnite account can reach donor records, giving history and payment settings. A stolen or reused password is the most common way accounts like this are taken over, and a second step stops that even when the password is known.

Two-step verification is included on every BetterUnite plan, at no cost.

What's changing and when

Date	Who it affects	What happens
Now	Everyone without two-step verification	A notice in your notifications and a marker on your profile menu ask you to set it up.
November 18, 2026	Users who own the organization, manage funding, refund donations or charge saved cards at events	Two-step verification is required to sign in. Any method works.
December 2, 2026	The same users	Text message codes no longer count for these users. They need an authenticator app or a passkey.
December 2, 2026	Every user who signs in to manage an organization	After signing in, you're asked to set it up, with the option to be reminded later.
December 15, 2026	Every user who signs in to manage an organization	Two-step verification is required to sign in. Any method works.

Donors, event guests, peer-to-peer fundraisers, supporter portal members and personal fundraising accounts are not affected. This applies to signing in to the BetterUnite admin on the web.

Choose a method

Each person sets up their own. You can add more than one, and we recommend a backup.

Method	How it works	Good to know
Passkey (recommended)	Confirm with your face, fingerprint or device PIN.	The fastest option, and it can't be phished. Add one on each computer or phone you use.
Authenticator app	Enter a 6-digit code from Google Authenticator, Microsoft Authenticator, 1Password or a similar app.	Works without cell service. Comes with 10 one-time recovery codes; keep them somewhere safe.
Text message	Enter a 6-digit code we text to your phone.	Easiest to start with. Messaging or data rates may apply. Not accepted for users who manage money after December 2, 2026.

Set it up

Click your name or initials in the top right corner and choose User Settings.
Under Sign-in and security, choose Create a passkey, Set up authenticator app, or add a phone number for text messages.
Follow the prompts. When you're done, the page says Two-step verification is on for your account.

You can also choose Set up now on the screen you see after signing in, starting December 2, 2026.

For step-by-step help with each method, see Sign In With a Passkey, Set Up an Authenticator App and Account Security: Turning on Multi-Factor Authentication.

For organization owners

See who has set it up

Go to Settings and open the Users tab. The Two-Step Verification column shows each user's method (Passkey, Authenticator app or Text message), or Not set up.

Send a reminder

To remind one person, open the menu next to their Edit button and choose Remind to Set Up Two-Step.
To remind everyone who hasn't set it up, click the Remind button in the notice above the user list.

Each person gets at most one reminder a day from your organization, however many times the button is clicked.

Require it now

You don't have to wait. Click Security & 2FA on the Users tab and turn on Enforce to require it for your team at their next sign-in. You can also limit your team to authenticator apps and passkeys there.

Common questions

We share one login among several people. What should we do?

Give each person their own user instead. A second step ties sign-in to one person's phone or device, so a shared login stops working well once it's required. Add people from Settings, Users, Add New, and give each one only the access they need.

I belong to more than one organization.

You set up two-step verification once for your BetterUnite login, and it covers every organization you belong to. If any of your organizations has stricter settings, those apply.

I got a new phone or lost my phone.

If you have a passkey on another device, a recovery code, or a phone number on file, use that to sign in, then update your methods in User Settings.
Otherwise, ask your organization's owner to open your user on the Users tab and click Reset 2FA Status. You'll set up a new method at your next sign-in.
If you're the owner, or you belong to more than one organization, contact support@betterunite.com and we'll verify your identity and reset it for you.

I entered the wrong code too many times.

After 5 incorrect codes in a row, verification is locked for 15 minutes. Wait, then try again.

Does this cost anything?

No. Two-step verification is included on every plan.