Multi-factor authentication (MFA) adds an additional layer of security by checking that it’s really you when you log in to Xero. It combines your user name and password with an authentication app on your smartphone or tablet. This second layer of security is designed to prevent anyone but you from accessing your account even if they know your password.
Learn moreNo one has access to your organization’s data unless you invite them into your account. You control what users can see and do in Xero.
We know that data security is important to you. We keep your information private, and only use it for agreed purposes. For instance, if you need help with a feature in Xero, you can choose to let Xero Support view your data while they help you.
If your computer or laptop is lost, stolen or broken, your account is backed up and protected online in the cloud. Xero’s online storage means you can log in from any device with an internet connection and you're good to go.
Your information is converted into unrecognisable code using industry standard data encryption. This protects your personal and financial data. Xero stores your data securely – and you control who has access.
All our servers and data centers have robust physical security controls, as well as 24/7 monitoring and surveillance.
We do regular data security audits and monitor security systems to identify and manage threats.
We replicate your data between data centers in different locations, to make sure it’s always available when you need it.
Multiple layers of data security mean Xero is up and running 99.9% of the time, so there’s no disruption to your business.
We’ll let you know the latest news on phishing and other scams on our Security Noticeboard. We’ll also give the latest recommendations on how to protect yourself from them.
