At Xero, we’re committed to continuously enhancing our world-class security standards. One of these improvements includes an update to the login page for desktop and mobile apps, which uses a newer technology and central login system called Identity.
More and more of our Xero and WorkflowMax customers will be using this new experience, so let’s explore what this means for you.
Layout and Quick links
The new page offers a cleaner design and friendlier user-experience. We’ve refreshed the colour palette and removed the clutter, to enable you to log in faster. We’ve added more quick link options to the bottom of the screen, including help centre and security noticeboard, so the information you need is only a click away.

Username and Password
While your username and password won’t change, when we update the login page, your browser or password manager may not be familiar with this new page meaning your saved username and password may not automatically pre-fill. Once you enter your username and password on this new page, it’ll work fine after that.
Bookmarked
No doubt all of us rely on favourites and bookmarking to save us time logging into our account. The old page may not work as the URL has changed. In this case, simply remove it from your list and save the new login page to your browser.
Mobile apps
The new login page also extends to the Xero mobile apps (Xero Accounting, XeroMe, Xero Projects and Xero Expenses) as well as WorkflowMax. If you’ve turned on auto-updating features on your device, you will automatically receive the updated version of the Xero app, and WorkflowMax, you are using. If you haven’t the next time you access any of the Xero apps or Workflow Max, you will be prompted to download the latest version.
Either way, you will be asked to log in using your username and password, complete two-factor authentication (where applicable) and reset your lock options.

Password Security
We can’t let this opportunity go by without talking about passwords. Over 80% of breaches occur due to sharing, weak or overusing the same password. Always use a strong, unique password and remember that your password on Xero should include a capital letter and number.
Keep your account secure
Two-factor authentication adds an extra layer of security and protects your Xero account from unauthorised access. Let us guide you through the set up.
Y change it
More b.s
Hi Lenny, we’re sorry to hear that – can I ask why you feel that way?
Because it is just done to keep your geeks in a job and it really pisses users off.
Hi Peter, we’re sorry you feel that way. The changes that we are making to our login system run much deeper than changing the aesthetics of the login page. What you are seeing is the user interface of our new identity and authentication platform. The new platform will allow us to provide enhanced security capabilities and continue to improve the login experience for our customers. Cybersecurity remains our top priority and we will continue to invest in capabilities like this so we can keep our users safe while using our platform.
Wow, what a strange response to an important change. Login screens are a known attack vector for phishing – so flagging up that this is about to change feels very responsible by Xero.
Thanks Henry – you’re spot on!
it wasn’t broken why fix it it was fine the way it was it yet another tech company changing things for the sake of changing things fix more important issues with the platform rather than the superficial just a thought
Hi Kevin, small changes like the improved login screen form part of a bigger initiative – which is helping to keep all our users safe before the Xero fortress and centralising the login platform. Xero is constantly staying ahead of new cybersecurity technology by making changes like this to our platform.
Beeny, I see that Lenny never responded but maybe I could say that his frustration maybe that of the top 10 issues with Xero from a day to day operational point – the Login would not even be in the top 1000.
Just this week I hit 3 significant limitations in Xero:
1. Getting my invoice email to show my logo without pixelating it to a point it is unusable (unresolved and support has given up)
2. Unable to delete invoices on mass (so have to either edit 1 by 1 or delete 1 by 1 – ok when its three but when its 1,000 that’s an issue
3. Needed more than 2 tracking categories but limited to 2 and have to utilise major work around to execute
Login – its just a place I go to on the way to getting to my real work.
Maybe that’s why he thinks is B.S.
Hi Paul, thank you for your comment. I appreciate your frustrations and I’m sorry to hear that you are experiencing a number of limitations in Xero. I have shared your feedback with my team.
This isn’t exciting news… a redesigned login page? C’mon! How about improving the ways to search invoices, or allowing users to edit quote emails and PDFs, or maybe adding more meaningful integrations with other platforms. Login page updates… no on cares!
Hi Danielle, we are also making these changes to Xero, but in light of COVID-19 and the cybersecurity activity we are seeing outside Xero, we felt it was important to communicate to our users a change in their login screen, so they don’t think they are being phished.
Been asking to add sick certificates to leave applications for years to reduce the need to keep a papercopy and it can be lodged by the employee – no – you want to change the login page. What a load of BS – other things would be a greater priority than making something look better with a clearer palette
Hi Michelle, you can ask the employee to send files to a specific email address in Xero: From the main navigation bar at the top of the screen, click on the dropdown by your business name, click Files in that dropdown. On the right hand side of the Inbox header, there is the email address which you or your employee can send files to, which will automatically add them to Xero’s Inbox. This Xero Central article covers it all. You can also set up folders for each employee if that makes it easier for you – also covered in the help article.
We understand that it’s not part of the Time Off approval workflow, as you suggest, however, the outcome is that it’s a simple way to reduce the need for paper copies, which you can take advantage of today. I hope that helps. If you need any further assistance, please don’t hesitate to reach out to our support team, who’ll be more than happy to give you a hand.
Thanks Beeny I was unaware of this feature.
Beeny Atherton, maybe I can tell you why a Xero user says, “More b.s” because you obviously haven’t read some of the thousands of posts from users in the Xero community forums pleading for better features, improvements or much needed fixes.
This change demonstrates how Xero seems to have plenty of time and resources to alter the “look” of the login screen but takes more than 6 years to address critical user needs, such as the absence of key invoicing requirements (enabling alternate and retained dispatch addresses for a customer account) or fundamental automation between purchase orders/bills and stock costing (auto product unit cost price updating based on last in purchase) or enabling field access to total cost of a carton purchase whereby the unit cost auto updates … just look at the non-fulfilled requests and obfuscation throughout years of feature requests and a feature voting system that is a running joke.
Maybe others will have an answer for you as well.
Hi Neil, I appreciate your frustrations in regards to feature requests. We are often asked how we prioritise what features or updates we build first because it may seem that some requests are overlooked. However, I can assure you that we do read all the requests we receive and they play a very important role in our strategies. Unfortunately, for some requests though the solution isn’t so straight forward – there are many factors that we must consider and perhaps this blog post may help shed some more light on how we prioritise product improvements and feature requests. Thanks again for your comment – we appreciate you sharing your thoughts with us.
We have signed these document two times each and I not sure what I am doing wrong but I keep getting a reminder to sign them
Hi Cathy, thanks for getting in touch. We want to help but we just need a little more information. Can please contact our support team by raising a case here providing as much information about the issue you are experiencing and we will be in touch directly. If you have already raised a case, please let me know your case number (it starts with CX) and I will follow up with my team on your behalf for an update. Thanks!
Still waiting for recipient created invoices. Much more important than a new login screen
Avoiding the need as usual. You have been avoiding making Recipient Created invoices available fo some years. Is it too hard for your nerds?
Hi Andrew, in light of COVID-19 and the cybersecurity activity we are seeing outside Xero, we felt it was important to communicate to our users a change in their login screen, so they don’t think they are being phished. However, it’s so timely you ask about recipient created invoices – we are working on something that will make it easier to generate a RCTI using Xero data, but you can use the Xero Central option available for you right now, which I’ve outlined below for you. This problem was all but solved with the introduction of Purchase Order templates! All it takes is a few seconds – here’s how to do it:
1. Edit a Purchase Order template
2. Create a docx Branding Theme and upload the PO template to it (or add to an existing theme that you use) – note that this PO template should ONLY be used for RCTI purchases – not real Purchase Orders.
3. Enter the purchase as a Purchase Order and assign the RCTI Branding Theme to it.
4. Approve the PO. You can now Send or Print the RCTI. The default file name has “Purchase Order” in it, which you can only change if you download the file and send manually.
5. Copy the PO to a Bill and mark it as fully billed. You can reprint at any time from the Purchase Orders / Billed tab, but not from the Bills section.
6. Complete the Bill details. I recommend you attach a copy of the PDF you generated to the bill for easy reference.
Peter McCarroll, a Xero user, created a 5 minute video on the process if you’d prefer to watch that. You can view it here.
Hello Beeny. I have a brand new security question I have never seen before and that I don’t know the answer to (my first girlfriend). I just want to get it and get some work done. Some assistance would be appreciated.
Hi James, can you please raise a case with our support team who will be able to give you a hand. Thanks!
Hey
Can you also add a setting that the security answers on Two Step authentication does not show while you type them in? The same as a normal password.
Sometimes there are people looking and my mobile device isn’t with me to get a security code.
Hi Michael, that is a great suggestion, we will look into this one. Thanks!
WHAT A TONS OF BULLCRAP
Hi Vernes, we’re sorry you feel that way. Cybersecurity remains our top priority and we will continue to invest to keep our users safe while using our platform.
I’d be happy if the pane at the top was locked so I didn’t have to keep scrolling up to click on the DASHBOARD!!
Hi Mardi, thanks for your comment – let me take a look into this to see what can be done.
I can’t view my quotes nor invoices on the mobile app. I’ve tried reinstalling the app plenty of times and still no success. it is inconvenient when one is not in the office. What is the problem?
Hi, sorry to hear that you are having some trouble here. Can you please raise a case here, with as much information as possible. We will then get in touch with you directly to give you a hand. Thanks!
Cannot log on at all now! Have done all the supposed solutions to this problem and still unable to clear the problem . It continually tells me that ‘the DNS could not be found’. I have spent all day now trying to log in.
Hi Richie, sorry to hear that you are having some trouble logging in. Can you please raise a ticket with our Support Team here so they can take a look at what might be causing the problem? I will also reach out to them on your behalf asking them to look out for your ticket so they can action it as quickly as possible for you. Hopefully we can get you back in ASAP. Sorry about this.
I read the above comments with some dismay, the point seems to have been missed, the update is to aid against cyber attacks, the fact that a opportunity to refresh the login page has been used is pretty immaterial.
There are no systems out there that do everything that all users want, personally find XERO one of the best, and yes I have tried some of the rest.
‘world-class security standards’ with no option to mandate the use of MFA, and limited/non-existent SSO options…
Something strange happens when you log in from the new “are you still there?” window.
That small window becomes the only panel from which you navigate and it only shows your drop down menu items.
Clicking refresh fixes it – but makes me lose the report I was on.
Surprised no one else has commented on this issue?
Help it won’t let me login in any format. It won’t verify code from authenticator app, or code emailed to me, or security questions! I need to pay wages NOW & I am stressing.
Hi Kylie, sorry to hear that you are having some trouble here. Please contact our Support Team here who will be able to give you a hand. I will also let them know that you are having some issues logging in. Hopefully we can get it resolved quickly for you.