Two-factor authentication for a Thomson Reuters Account

With Thomson Reuters Account, you can improve security with two-factor authentication to help verify your identity at sign in to ensure your account won’t be compromised. It adds an additional layer of protection in case your password is ever compromised.

Who's required to use two-factor authentication

Two-factor authentication (2FA) is a security option for most people. However 2FA is required for
products
that have elevated account security requirements, including but not limited to:
  • Legal products like CLEAR, Public Records searches, and others.
  • Tax and accounting products like Onvio, NetFirm CS, NetClient CS, and CS Professional Suite.
    note
    If your Thomson Reuters Account was migrated from OnePass, your 2FA enrollments may have been migrated as well. If you no longer feel the need to secure your account with 2FA, remove them from your security profile at https://account.thomsonreuters.com.

Verification options

You can access our products safely and securely using 1 or more of the following methods.
  • Auth0 Guardian mobile app.
    The Guardian app supports push notifications. Letting you to respond to a 2FA challenge without having to enter a code. Enrolling the Guardian app also grants you to use an authenticator code for 2FA. If your mobile device is not connected to a network for push notification. The application is free on the Apple App Store and on Google Play for Android.
  • Authenticator apps.
    Authenticator applications and browser plug-ins let you enter a code at sign in. Microsoft, Google, LastPass, and Proton offer reliable authenticator applications. Authenticator applications are a secure and reliable form of 2FA, and some let you sync keys across devices for additional convenience.
  • Security Key.
    The Thomson Reuters Account support low-cost, non-network-dependent hardware token solutions like Yubikey. These are a great alternative for organizations that don’t permit or support employee use of smartphones.
  • Biometrics.
    On supported devices, turn on fingerprint or facial recognition for faster sign-in. Once you sign in and register the device, you can authenticate with your fingerprint or face the next time you sign in on that device.
  • Phone.
    Register your phone number to have the option to receive a code. Enter the code when you receive via SMS or voice call (in supported regions). Note that phone message delivery is highly dependent on phone carrier networks, and may not be as reliable as the other methods offered.
    • After 10 attempts, your phone-based 2FA option will be locked. You can still use any non-SMS 2FA methods you have already configured on your account.
    • Each phone call or text message counts as 1 attempt toward the 10-attempt limit. If you exceed this limit, you'll regain 1 attempt per hour.
    • By default, the 2FA process uses the text message option. To receive a phone call instead, select
      Get a Call
      on the 2FA screen. Selecting this option will use 2 of your attempts.

Related Content