---
title: "Logging In and Two-Factor Authentication"
description: "Log in with your company code, user name, and password; create your first user; and set up or use two-factor verification codes."
url: "https://theasst.com/docs/logging-in-and-two-factor-authentication/"
updated: "2026-10-08"
category: Getting Started
---

# Logging In and Two-Factor Authentication

## The Login Page

Logging in takes two quick steps on one page. Go to TBA’s address in your browser (the same on a computer or a phone; see [Using TBA on Your Phone](https://theasst.com/docs/using-tba-on-your-phone/)).

1. **Company code.** Type your company’s code — the short code chosen when you [signed up](https://theasst.com/docs/signing-up/) — and click **Continue**. TBA finds which of its servers hosts your company and, if needed, takes you there automatically. You may notice the web address change briefly; that is normal. Codes are not case sensitive.
2. **User name and Password.** The page now shows your company code at the top and asks for your **User name** and **Password**. Your administrator creates them (see [Users and Permissions](https://theasst.com/docs/users-and-permissions/)). Click **Log In**.

TBA remembers the last company code you used on that browser, so next time it is already filled in. If you typed the wrong company, click **(change)** next to the company name to go back to step 1. You can also bookmark your company’s login with its code (for example `.../index.html?co=yourcode`) to skip typing it.

### If Step 1 Doesn’t Work

- *“We couldn’t find that company code.”* Check the spelling. Ask your administrator if you aren’t sure of it.
- *“That isn’t a valid company code.”* The code contains something other than letters and numbers.
- *“That company is being moved right now.”* Wait a few minutes and try again.

### Signed Out for Being Idle

You are signed out after the number of idle minutes set on your user. Just log in again.

### Too Many People Logged In

Your plan allows a certain number of people to be logged in at the same time (see [TBA Subscription](https://theasst.com/docs/tba-subscription/)). If you log in when the limit has been reached, TBA shows a **Concurrent User Limit** message. It lists your *own* other active sessions — for example one you left open on another computer — so you can end one and log in. It never shows or ends anyone else’s sessions.

## Your First Login: Creating Your Own User

When a new company is created, you start out signed in as the built-in **admin** account, which is reserved for setup. A welcome page asks you to create your own personal login:

1. Enter your **User name**, **Full name**, **Email address**, **Password**, and **Confirm password**. All are required.
2. TBA sends a 6-digit code to your email address. Enter it as the **Verification code** to prove the address is yours.
3. You are then taken on to the [Quick Start Setup Wizard](https://theasst.com/docs/quick-start-setup-wizard/).

You can add more users and customize their permissions afterward.

## Two-Factor Authentication

Two-factor authentication (also called MFA) means that after your password you must also enter a 6-digit code, which proves it is really you. An administrator can require it for any user, and TBA requires it for the first administrator of a new company.

### Setting It Up

If your administrator requires it, the next time you log in you see **Set Up Two-Factor Authentication**. Choose a verification method:

- **Authenticator app** — use an app such as Google Authenticator, Microsoft Authenticator, Authy, or 1Password. Scan the QR code on the page with the app (or type in the key shown), then enter the 6-digit code the app displays under **Verification code**.
- **Email** — TBA emails a 6-digit code to the address on your user. Enter it. This option isn’t offered if your user has no email address on file.

If you change your mind, **Cancel — return to login** takes you back.

### Logging In With It

After you enter your password, the **Two Factor Verification** page asks for the 6-digit code from your authenticator app (or the one emailed to you). Enter it to finish logging in. Codes expire quickly, so enter yours promptly.

### Locked Out?

If you lose your phone or can’t get the codes, ask an administrator to open your user and click **Reset MFA**. You will be asked to set it up again next time you log in.