Also known as: 2FA, two-step verification, multi-factor authentication, reset 2FA for a staff member or user, lost phone, new phone, locked out of 2FA, authenticator not working.

Since the move to BrightID single sign-on, two-factor authentication (2FA) for your account is managed via BrightID and Bright Hub rather than within Inform Direct itself. 2FA has been mandatory across all Bright products since 17 September 2026. It cannot be turned off by you or by us, but you can change the method (authenticator app, email or SMS).

How to activate 2FA

1. Go to hub.brightsg.com — you should be logged in automatically, provided you're currently logged in using your BrightID.
2. If you don't currently have an organisation set up, add yours — this doesn't create a new account or take payment.
3. Once the organisation is created, select your initials in the top-right corner of the screen.
4. Click Edit Profile.
5. Scroll down to the Security section and select Enable 2FA.

See also: What Is an Authenticator App and How Do You Install One?

How to change your 2FA method

Log in to hub.brightsg.com, select your initials in the top-right corner, then go to Profile → Security → Change and choose authenticator app, email or SMS.

Lost your phone or locked out of 2FA?

1. Use a recovery code. If you use an authenticator app, you were given one-time recovery codes when you set it up. Enter one instead of the app's code.
2. Ask an Admin or Owner of your organisation to reset it. If you are a member of a Bright Hub organisation that someone else administers, they can reset your 2FA (see the steps below).
3. Contact us. If you are the Admin or Owner of your own organisation (the usual case for most Inform Direct users), nobody else can reset your 2FA. Email support@informdirect.co.uk — we'll take steps to verify your identity for security, then switch your 2FA method to email so you can sign in. 2FA can't be disabled, but once you're in you can change to a different method from your profile.

How an Admin or Owner resets a staff member's 2FA

1. Go to hub.brightsg.com and log in.
2. Select Members on the left-hand side of the page.
3. Click Manage next to the staff member who needs to regain access.
4. Select Reset 2FA from the drop-down.
5. Choose the method they would like to use: email or SMS.
6. If you choose email, they'll be emailed their code the next time they log in.
7. If you choose SMS, enter their mobile number, then enter the verification code sent to that number to confirm it. The next time they log in, they'll receive their code by text message.

Only Admins and Owners can see Manage → Reset 2FA. If the person is not linked to your organisation in Bright Hub, you won't be able to reset them — ask them to email support@informdirect.co.uk.

Can I add my 2FA to a second phone?

No. You can't add a second phone to the 2FA you already have set up, and the original QR code can't be shown again. The right route is to reset your 2FA (see "Lost your phone or locked out of 2FA?" above) and set it up again.

Also known as: add BrightID authenticator to a second phone, use 2FA on two phones, show the QR code again, export authenticator accounts, transfer 2FA to a new device, set up the authenticator on another phone, no option to export accounts.