Boulevard has rolled out a set of login security changes: staff sign in more often, and a verification code is now required for billing and payment pages. Short answers below — each links to the full article if you need more.
Signing in more often
Why am I being logged out more often?
An account that stays signed in forever is an account anyone can walk up to and use. Requiring a fresh login limits how long a stolen password or an unattended screen can be used without anyone noticing.
How often will I need to sign in?
| Signed out | So you sign in… |
Dashboard (web) | Every night at midnight, local time | Each morning |
Professional App | Every Sunday night at midnight | Monday morning, then weekly |
Duo App | Never | — |
Can I turn this off?
No. It's a platform-wide security standard, not a per-business setting.
Was I signed out because something's wrong with my account?
No. A scheduled logout isn't an error and doesn't need to be reported. Sign back in and carry on.
→ Session duration and automatic logout — the full picture, including the separate inactivity timeout and how admins adjust both
Verification codes
What are my options for receiving codes?
Two: a text message, or an authenticator app on your phone. The authenticator app works with any phone number, including international numbers and lines that can't receive texts.
Which should I pick?
Text message is simplest if you have a US or Canadian mobile number (+1) and reliable signal. Choose the authenticator app if your number is international, your line can't receive texts, or cell service is unreliable where you work.
⚠️ You can't switch later. Once you set up a method, changing it requires contacting Support to reset two-step verification — which also requires a password reset. Choose carefully.
Do codes expire?
Text message codes expire after 5 minutes. Authenticator app codes change every 30 seconds.
Which authenticator app should I use?
We recommend Google Authenticator — free, works on iPhone and Android, and the app most Boulevard customers use. Microsoft Authenticator, Authy, 1Password, and Okta Verify also work.
→ How to set up an authenticator app — step-by-step, including which app to install and how to scan the QR code
My phone can't receive texts. What do I do?
Use an authenticator app. It doesn't receive anything — it generates codes on your phone, so it works on landlines, internet-based phone lines, international numbers, and phones with no signal at all.
Can I get codes by email?
No. If your email were compromised, codes sent there wouldn't protect your account.
Setting it up
Can I require two-step verification for all staff?
Yes — Manage Business > Security. All staff will be required to set it up, and everyone gets an email letting them know.
Can I require it for only specific users?
Not currently. It's either required for everyone at your business, or individuals turn it on for their own accounts.
We'd encourage anyone with Admin or Manager access to turn it on regardless — those are the accounts attackers want most.
I turned it off for my business. Why are staff still being asked for a code?
Once someone has signed in with two-step verification, their account keeps it until they turn it off in My settings. Turning it off business-wide doesn't remove it retroactively.
→ Two-step verification: Setup and FAQ — full setup steps for admins and staff
Billing and payment pages
Why am I being asked for a code just to open the billing page?
Separate from signing in, Boulevard requires a verification code before anyone can view or change:
Manage Location > Payment processing
Manage Business > Payment processing
Manage Business > Billing
One of the threats we actively defend against is an attempt to redirect payouts to a fraudulent bank account. A second step here means a stolen password alone isn't enough to move your money.
I'm an Admin. Why does this apply to me?
It's a protection on the page itself, not something a permission level exempts you from. Everyone who can reach those pages sees the prompt.
What if I enter the wrong code too many times?
You won't be locked out of your account. You just can't view or change those pages until a code goes through.
I haven't set up two-step verification yet.
You'll be walked through setting it up before you can access the page.
Trouble signing in
I didn't get my text message.
Check your signal and confirm your number under My settings > Profile > Personal information. Codes expire after 5 minutes — if a text arrives late, request a fresh one.
My authenticator app code was rejected.
Usually the code changed as you were typing, or your phone's clock isn't accurate. → Fixes here
I have a new phone number.
Update it under My settings > Profile > Personal information. Text codes will go to the new number.
I got a new phone.
Text codes, same number: nothing changes. Codes arrive on your new phone.
Authenticator app: codes don't transfer. Contact Support and we'll reset two-step verification. The reset signs you out of the Dashboard and Pro app and requires a password reset. You'll set it up again at your next sign-in.
I'm locked out and can't get a code at all.
Contact Support. We can reset two-step verification on your account using the process above.