Multi-factor authentication (MFA) adds an additional layer of security by checking that it’s really you when you log in to Xero. It combines your user name and password with an authentication app on your smartphone or tablet. This second layer of security is designed to prevent anyone but you from accessing your account even if they know your password.
Learn moreNo one has access to your organisation’s data unless you invite them into your account. You control what users can see and do in Xero.
We know that data security is important to you. We keep your information private, and only use it for agreed purposes. For instance, if you need help with a feature in Xero, you can choose to let Xero Support view your data while they help you.
If your computer or laptop is lost, stolen or broken, your account is backed up and protected online in the cloud. Xero’s online storage means you can log in from any device with an internet connection and you're good to go.
Data is encrypted using industry-standard data encryption, multiple layers of firewalls are in place, all access to our data centres and servers is controlled and monitored 24/7, and we perform regular security audits.
We replicate your data between data centres in different locations so that Xero is up and running most of the time.
We’ll let you know the latest news on phishing and other scams on our Security Noticeboard. We’ll also give the latest recommendations on how to protect yourself from them.
