We are happy to announce that the much-anticipated Two-Factor Authentication (2FA) is now available on Income. Protecting investor capital isn’t just about how loans are structured. It’s also about how securely an account can be accessed in the first place. Two-Factor Authentication builds on that same foundation, adding a second, independent layer of proof at login so that access to an account no longer relies on a password alone.
How Two-Factor Authentication Works
Once enabled, logging in requires two things: your password and a one-time code generated by an authenticator app on your phone. That code refreshes every 30 seconds and is tied to your specific device, so a password alone is no longer sufficient to access an account.
As part of setup, Income generates a one-time RECOVERY CODE on an “Almost There!” screen. This code is the only way to regain access to an account if a device or authenticator app is ever lost. Support cannot retrieve it after the fact, so it should be treated with the same care as a password and stored somewhere secure, such as a password manager. The setup flow requires checking “I have safely recorded this code” before it can be completed, to make sure this step isn’t skipped.
Practical Benefits for Investors
- Enhanced Security: A compromised password is no longer enough on its own to access an Income account.
- Peace of Mind: Every login carries independent confirmation that it’s genuinely the account owner.
- Minimal Disruption: Setup takes about two minutes. The extra step at login is a short code, a small trade-off for meaningfully stronger protection.
2FA is optional. Investors can enable it whenever suits them, and disable it again at any time from Account Settings > Security.
Setting It Up
- Go to Account Settings > Security and select Enable Two-Factor Authentication.
- On the Secure Your Account screen, scan the QR code with an authenticator app, then enter the one-time code it generates and select Continue.
- On the Almost There! screen, copy the recovery code and store it somewhere safe.
- Check “I have safely recorded this code” and select Continue to finish.
We encourage every investor to head to Account Settings > Security and enable Two-Factor Authentication today.
We look forward to continuing to invest in the security of the Income platform as our investor community continues to grow.
