SMS two-factor authentication (2FA) sends a 6-digit code to your phone that you enter to verify your identity when signing in, resetting your password, or approving high-risk actions.
Who needs SMS 2FA on Relay?
Every Relay user needs 2FA configured. Relay requires 2FA on every account and cannot disable this requirement.
Business owners signing in to their Relay account
Team members added to a Relay account
Advisors and bookkeepers invited to client accounts
Anyone resetting a password, changing profile details, or approving a high-risk action
How SMS 2FA works on Relay
SMS 2FA verifies you own the mobile phone number tied to your Relay account by texting you a code you enter to complete a sensitive action. It runs on three steps:
Relay sends a 6-digit verification code to the mobile phone number on file
You enter the code in Relay within the prompt window
You can select "Remember this device" to reduce prompts for about 30 days on that device
When does Relay send an SMS code vs. a magic link?
Relay uses magic links by default and switches to SMS codes for higher-risk moments. The trigger depends on what you are trying to do and which device you are on.
Magic links are sent for logins on new or unrecognized devices and for challenged logins
SMS codes are sent during password resets, high-risk actions, and profile changes
"Remember this device" at login reduces both types of prompts for about 30 days on the same device
How do I set up SMS 2FA during account registration?
You set up SMS 2FA during Relay account registration by verifying your mobile phone number with a 6-digit code Relay texts to that number.
Enter your mobile phone number during signup
Wait for the SMS with the 6-digit verification code
Enter the code in Relay to confirm the number
Select "Remember this device" at login if you want to reduce prompts for about 30 days
Can I use an authenticator app instead of SMS?
Yes. Contact the Relay Customer Experience team to switch to app-based 2FA. They will verify your identity before making the change to your Relay account. See Switching to app-based two-factor authentication (2FA) for the full walkthrough.
Can I use a non-U.S. phone number for 2FA?
Yes. Non-U.S. phone numbers are accepted for SMS 2FA verification on Relay.
Can one phone number verify multiple Relay accounts?
Yes. The same mobile phone number can authenticate multiple Relay logins across different businesses, which is useful if you own more than one business or manage multiple entities from one login setup.
How do I update the phone number linked to my 2FA?
You can update your mobile phone number from your Relay account settings if you can sign in.
If you can sign in: update the number from your account settings. See Updating your mobile phone number for 2FA for step-by-step instructions.
If you cannot sign in: contact the Customer Experience team so they can verify your identity and update the number for you.
What should I do if I'm not receiving my SMS codes?
First confirm the phone number on file is correct in your Relay account settings. If the number is right and codes are still not arriving, contact the Customer Experience team for troubleshooting. See What should I do if I'm not receiving my 2FA OTP codes? and Troubleshooting SMS Verification Issues for common causes and fixes.
Why does Relay require SMS verification for security changes?
Relay cannot make changes to your login information over email, including your mobile phone number. SMS verification confirms the request is coming from the account owner and protects your Relay account from unauthorized changes.
What SMS 2FA covers and what it does not cover
SMS 2FA covers login and identity verification on your Relay account. It is not a substitute for other account-security habits.
What it covers:
Verifying your identity at login on new or unrecognized devices
Password reset flows
Profile and login-information changes
High-risk in-account actions
What it does not cover:
Physical debit card or credit card security (see the card-specific security articles)
Suspicious transactions or fraud alerts (those flow through Relay's fraud alert system)
General account hygiene, such as using a strong password and keeping team member access current
Related articles
Talk to our Customer Experience team
If this article did not fully answer your question, our Customer Experience team is here to help.