The QuickBooks number problem: changing it turns two-step verification off

What Intuit publishes about number type

Nothing. Intuit's help article on multi-factor authentication does not mention VoIP, virtual numbers or landlines. Claims that Intuit rejects virtual numbers circulate in its community forum, posted by users and support agents rather than published as policy, so this page does not repeat them. If someone tells you Intuit has a VoIP rule, ask for the help article.

You cannot turn the phone off

• Intuit, on multi-factor authentication

  “Multi-factor authentication can't be turned off, but you'll have verification options based on the info we have on file”

  https://quickbooks.intuit.com/learn-support/en-us/help-article/security-risk/verify-account-multi-factor-authentication/L2Xp0GNiT_US_en_US

• Intuit, on unrecognised devices

  “When you sign in on a device we don't recognize, we'll send you a one-time passcode through your email or mobile device.”

  https://quickbooks.intuit.com/learn-support/en-us/help-article/security-risk/verify-account-multi-factor-authentication/L2Xp0GNiT_US_en_US

Turn two-step verification on and it goes further: “we'll verify your identity with a one-time passcode every time you sign in on any device.” Turn it off and Intuit still says “we'll still ask you to verify the first time you sign in on an unrecognized device” (Intuit). Either way, the number on file stays live. It is not a setting you can retire.

Changing the number silently weakens the account

• Intuit, on updating the phone number

  “If you update the phone number connected to your Intuit Account, you'll automatically turn off two-step verification, but you can turn it back on with your new number.”

  https://quickbooks.intuit.com/learn-support/en-us/help-article/security-risk/verify-account-multi-factor-authentication/L2Xp0GNiT_US_en_US

Read that twice. The update does not migrate two-step verification to the new number: it switches it off. If nobody notices, a finance account sits with weaker sign-in protection than it had that morning. Whatever number you move to, the job is not done until you have turned two-step verification back on and seen a code arrive.

And if you no longer have the old number

Then it is not a settings change at all. Under the heading for using a different phone number, Intuit's instruction is: “Complete the Proof of identity form. You'll be asked to attach a copy of your driver's license, state ID, passport, or notarized document” (Intuit).

That is an individual's government ID, not a company document — which is the single best argument for the number on a QuickBooks account belonging to someone who will still be reachable in two years, and for moving it while the old number still works.

Adding or changing the number

Intuit's own path (Intuit):

1. 01Sign in to your Intuit Account.
2. 02Select Sign in & security.
3. 03In the 2-step verification section, select Turn on, then Set up.
4. 04Check the phone number, then choose how to verify: Text message or Voice message.
5. 05Enter the code, then your password.

The voice option matters here. If a code is read out over an automated call rather than texted, a Cleat line transcribes the call and the transcript lands in the inbox like a text — nothing rings, and nobody can call back. Verification by phone call covers which services use it and what the transcript looks like.

An authenticator app is set up from the same screen — “Set up an authenticator app to generate one-time passcodes instead of receiving them by text” — and Intuit lists passkeys too: “Sign in across multiple devices using face, fingerprint, or screen lock” (Intuit).

Teams

QuickBooks Online users are invited by email, and Intuit's wording is that they “can create a new Intuit account or just sign in if they already have one” (Intuit). So each person signs in as themselves, and two-step verification is a setting on their own Intuit Account. Intuit does not document a way for an administrator to set or see another user's phone number, and this page does not claim one exists. The shared-number question applies to the account that owns the company file, not to the staff around it.

Where a Cleat line fits, and where it is the wrong answer

It fits when the Intuit login is a business asset and the number attached to it should not be a personal handset: a company whose bookkeeping outlives its bookkeepers, or an owner outside the US whose old US mobile is gone and who still needs the passcode on an unrecognised device. A Cleat line is a real US mobile number, not VoIP, held by one identity-verified person, readable by a team, at $24.99 a month. What a real US number is used for covers the situations it does and does not solve.

• It is not a shortcut around the proof-of-identity form. If you have already lost the old number, you will be filling that form in whatever number you move to.
• It does not replace the authenticator app. Intuit offers one, and on an accounting login it is the better primary method.
• It is not for a second Intuit account. One verified person per line; using it to get around a platform's account rules breaks their terms and ours.
• It cannot dial out. Receive-only, no 911. Keep an ordinary phone for emergencies.

Keep reading

Stripe · GoDaddy · Etsy · Every service in this section