Two-factor authentication
Beauty salon accounts hold client treatment records, payment details and booking histories. Xircuit's two-factor authentication ensures that a leaked password alone cannot unlock access to your client data — keeping your business and your clients protected.
Request a demoXircuit's two-factor authentication uses time-based one-time passwords (TOTP) from any authenticator app — Google Authenticator, Microsoft Authenticator or Authy. Every account stays protected against credential-stuffing attacks even if a password is ever compromised.
Works with Google Authenticator, Microsoft Authenticator, Authy and any standard TOTP app — no proprietary hardware required.
Even if a password is exposed in a third-party breach, 2FA blocks unauthorised access to Xircuit accounts.
Users set up 2FA from their own profile page in under two minutes — no admin intervention required.
Org admins can require 2FA for all staff logins, ensuring consistent security across the whole team.
TOTP codes are generated locally on the user's device — no SIM-swap risk and no reliance on phone signal.
Beauty salons that enforce 2FA for staff and admin accounts add a strong, practical layer of security to client records and payment data — typically with no disruption to daily operations and with full GDPR compliance support built in.
Xircuit supports any standard TOTP authenticator app, including Google Authenticator, Microsoft Authenticator and Authy. You scan a QR code once during set-up and the app generates codes automatically.
Yes. Org admins can enforce 2FA for all staff roles from the organisation security settings. Users without 2FA set up will be prompted to enrol before accessing their account.
Users receive recovery codes when they set up 2FA. An org admin can also disable 2FA for a specific account via the admin panel so the user can re-enrol.