How to set up two-step verification
Two-step verification, also known as two-factor authentication (2FA) or multi-factor authentication (MFA), adds an extra layer of protection to your Boulevard account. When you turn on two-step verification, logging in requires not just your password, but also a one-time security code either texted to your phone number or sent via authentication app. This makes it much harder for anyone else to access your account, even if they know your password. Two-step verification can be turned on business-wide, or for individual staff.
Why use two-step verification?
Stronger account security: Passwords alone can be guessed, stolen, or reused. Two-step verification adds another barrier against unauthorized access.
Protects sensitive client data: As a self-care business, your Boulevard account contains valuable client information and payment details. Two-step verification helps keep that safe.
Reduces risk of fraud: Extra verification prevents attackers from using stolen credentials to log in.
Supports compliance needs: Many businesses, especially medspas, require stronger login security for HIPAA and other data privacy standards.
Which method should I choose?
You'll pick one method when you set up two-step verification.
⚠️ Choose carefully — you can't switch later. Once you finish setup, you can't change from text message to authenticator app (or the other way around) on your own. Changing your method requires contacting Boulevard Support to reset two-step verification, which also requires a password reset.
| Text message | Authenticator app |
Phone number needed | US or Canadian mobile (+1) | Any number, including international |
Works without cell service | No | Yes |
Works if your line can't receive texts | No | Yes |
Speed | Wait for the text to arrive | Code is already on your phone |
Setup effort | Confirm your number | Install a free app, scan a QR code |
Choose text message if you have a US or Canadian mobile number and reliable cell service where you work.
Choose an authenticator app if any of these are true:
Your phone number is outside the US or Canada
Your number can't receive texts — for example a landline, or an internet-based phone line (sometimes called VoIP) like the ones many front desks use
Cell service is unreliable in your building
You'd rather not wait on texts
Not sure how an authenticator app works? → How to set up an authenticator app for two-step verification walks through it start to finish, including which app to install and how to scan the QR code.
For Business Admins: Turning on two-step verification for your business
Go to Manage Business > Security
Toggle Two-step verification to On to require it for all employees
3. Confirm that you'd like to require two-step verification for all employees
All employees will immediately receive an email notification
Once enabled, every employee will need to set up one of two ways to authenticate upon login:
They can set up with a verification app of their choice (recommended route)
They can enter their mobile number to receive texted verification codes (US or Canadian mobile number (+1) country code required)
Turning off two-step verification for your business
Follow the same steps as above to turn off two-step verification for your business.
For enhanced security, employees who activated two-step verification while it was enabled for the entire business will be required to continue using it for login. They can turn it off in their individual settings as long as it is not required by the business.
For Employees: Setting up two-step verification on your account
Go to your User profile > My settings.
2.Scroll to the Two-step verification section and toggle it on.
3. Choose how you want to receive your codes:
Authenticator app — works with any phone number. → Full step-by-step guide
Text message — requires a US or Canadian mobile number (+1) saved under My settings > Profile > Personal information. Add or check your number there before you start.
⚠️ Once you set up a method, you can't change to the other one yourself. See Which method should I choose? above.
4. Enter the 6-digit code — either the one texted to you, or the current code from your authenticator app
6. Click Verify to finish setup.
Turning off two-step verification for your individual account
Staff can only turn off two-step verification if it isn't required at the business level.
Go to your user profile > My settings
Toggle off two-step verification
Enter the security code from your text message or authenticator app
Still getting codes after turning it off? Two likely reasons:
It's required for your whole business. If your account admin has turned it on in Manage Business > Security, individual staff can't turn it off. Check with your admin.
Your business turned it off, but your account keeps it. Once you've signed in with two-step verification, it stays on for you until you turn it off yourself using the steps above.
Logging in with two-step verification
From now on:
Sign in with your email and password.
Enter the code sent to your phone or authenticator app
Access your account as usual.
How often will I need to do this? Boulevard now ends sessions on a schedule, so in practice:
Dashboard: once each morning (sessions end nightly at midnight)
Professional App: once a week (sessions end Sunday night at midnight)
Duo App: no automatic logout
See Automatic Staff Logout for details.
Extra verification for billing and payment pages
Separate from signing in, Boulevard requires a verification code before anyone can view or change your most sensitive financial settings:
Manage Location > Payment processing
Manage Business > Payment processing
Manage Business > Billing
Why: one of the threats we actively defend against is an attempt to redirect your payouts to a fraudulent bank account. Requiring a second step here means a stolen password alone isn't enough to move your money.
This applies to everyone with access to those pages, including Admins. It's a protection on the page itself, not something your permission level exempts you from.
What you'll see: a prompt for a 6-digit code when you open one of those pages. Enter the current code from your text message or authenticator app to continue.
If you haven't set up two-step verification yet, you'll be asked to set it up before you can access these pages. Follow For Employees: Setting up two-step verification on your account above, then return to the page.
If you enter the wrong code, you won't be locked out of your account. You just won't be able to view or change those pages until you enter a valid code.
Tips & Troubleshooting
I didn't get my text message.
Check that you have mobile signal
Confirm the number on your profile is correct under My settings > Profile > Personal information
Codes expire after 5 minutes — if the text arrives late, request a new code rather than using the old one
Texts consistently slow or not arriving? Cell service in your building may be the issue. An authenticator app avoids this entirely, but switching methods requires contacting Support to reset two-step verification, which also requires a password reset.
My authenticator app code isn't working.
Usually the code changed while you were typing, or your phone's clock isn't accurate. See the full troubleshooting steps in the authenticator app guide.
I have a new phone number.
Update it under My settings > Profile > Personal information. If you use text message codes, they'll go to the new number.
I got a new phone.
Text message codes, same phone number: nothing changes. Your codes will arrive on your new phone.
Authenticator app: codes don't automatically transfer to a new phone. If you can no longer generate codes, reach out to Support and we'll reset two-step verification for you. The reset signs you out of the Dashboard and the Pro app and requires a password reset. On your next sign-in, you'll set up two-step verification again.
I'm locked out and can't get a code at all.
Contact Boulevard Support. We can reset two-step verification on your account. The reset signs you out of the Dashboard and the Pro app and requires a password reset, after which you'll set up two-step verification again on your next sign-in.
My phone number can't receive texts.
Landlines, hosted landlines, some VoIP numbers, and numbers outside the US and Canada can't receive verification texts. Use an authenticator app instead — it works with any number, and doesn't need to receive anything. → Authenticator app setup guide
Can I get codes by email instead?
No. Email isn't a supported method — if your email were compromised, codes sent there wouldn't protect your account. If you can't receive texts, use an authenticator app.
Which authenticator app should I use?
We recommend Google Authenticator — it's free, works on iPhone and Android, and is the app most Boulevard customers use, so our Support team knows it well. Other popular authenticator apps work too, including Microsoft Authenticator, Authy, 1Password, and Okta Verify. → Setup guide