Learn Centre

Securing Your Account

Passwords, two-factor authentication, and how we store your data.

Overview

Radley Finance includes security features to protect your account and your financial data: password management and two-factor authentication (2FA). This guide explains how to use both.

Using Google or Microsoft sign-in? Your password and two-factor authentication are managed by your provider, not in Radley Finance. The Security section will show "Managed by Google" or "Managed by Microsoft" - visit your provider's security settings to make changes there.

Accessing Security Settings

Until 2FA is enabled, the app shows a banner at the top of most pages - "Protect your account with two-factor authentication" - with an Enable 2FA shortcut that takes you straight here.

Step 1: Open Settings

  1. Log into Radley Finance
  2. Navigate to Settings

Step 2: Go to Security Section

In the Settings sidebar:

  • Look for "Security" under the General section
  • Click to view your security options

Changing Your Password

How to Change

  1. Go to Settings > Security
  2. Enter your current password
  3. Enter your new password (at least 8 characters) and confirm it
  4. Click Save

Reauthentication

For your protection, changing your password requires confirming it's really you:

  • You'll be asked for your current password
  • If you have 2FA enabled, you'll also be asked for a 6-digit code from your authenticator app

Forgot Your Password?

If you can't remember your current password:

  1. Sign out
  2. On the sign-in screen, click "Forgot password?"
  3. We'll email you a secure reset link

Two-Factor Authentication (2FA)

What is 2FA?

Two-factor authentication adds a second layer of protection to your account. Even if someone learns your password, they can't sign in without the 6-digit code from your authenticator app.

Radley Finance uses TOTP (time-based one-time passwords) - the standard supported by apps like Google Authenticator, Authy, 1Password, and Microsoft Authenticator.

Before You Start

  • 2FA is available for email/password accounts (Google/Microsoft accounts handle 2FA through the provider)
  • Your email must be verified before you can set up 2FA
  • You'll need an authenticator app installed on your phone

Setting Up 2FA

You may also see a dismissible blue banner in the app - "Protect your account with two-factor authentication" - with an Enable 2FA link that takes you straight to setup.

  1. Go to Settings > Security
  2. Click "Set Up 2FA"
  3. A setup dialog appears with a QR code
  4. Open your authenticator app and scan the QR code
    • Can't scan? Use the manual setup key shown below the QR code instead
  5. Click Continue
  6. Enter the 6-digit code from your authenticator app
  7. Click "Enable 2FA"

That's it - your account is now protected.

Signing In with 2FA

Once 2FA is enabled:

  1. Enter your email and password as usual
  2. A verification code dialog appears
  3. Open your authenticator app and enter the current 6-digit code
  4. Click Verify

Codes refresh every 30 seconds - if a code is rejected, wait for the next one and try again.

Removing 2FA

If you need to turn off 2FA (for example, when switching phones):

  1. Go to Settings > Security
  2. Find your enrolled authenticator and click Remove
  3. Confirm the removal - you'll be asked to reauthenticate (password plus a current 6-digit code)

After removal you can set up 2FA again with your new device.

If You Lose Your Authenticator

If you lose access to your authenticator app (lost or reset phone) and can't sign in:

  1. Check your other devices - authenticator apps like Authy and 1Password can sync across devices
  2. Check your app's backup - many authenticator apps offer cloud backup or export
  3. Contact us - email support@radley.tax from your account email address and we'll help you regain access after verifying your identity

Tip: When setting up 2FA, save the manual setup key somewhere safe (like a password manager). It lets you re-add the account to any authenticator app later.

Security Best Practices

Strong Passwords

  • Use a unique password you don't use anywhere else
  • Longer is stronger - consider a passphrase
  • Use a password manager to generate and store it

Enable 2FA

  • It's the single most effective protection for your account
  • Takes two minutes to set up
  • Especially important if your models contain sensitive financial data

Keep Your Email Secure

  • Your email account can reset your Radley password
  • Secure your email with 2FA as well

Troubleshooting

"Verify your email first"

2FA setup requires a verified email. Check your inbox for the verification email, or resend it from the verification screen.

Code Not Accepted

  • Make sure you're entering the current code (they refresh every 30 seconds)
  • Check your phone's clock is set to automatic - TOTP codes depend on accurate time
  • Confirm you're using the entry for Radley Finance in your authenticator app

Can't Change Password with 2FA Enabled

Password changes require both your current password and a current 6-digit code. Have your authenticator app ready before starting.

Browse the Quick Reference guides for shortcuts, glossary, and FAQ.