[{"data":1,"prerenderedAt":119},["ShallowReactive",2],{"seo-\u002Fupdates\u002F2026-08-trusted-devices":3,"content-query-BPl1rofW9Z":10},{"title":4,"description":5,"publishedAt":6,"image":7},"A second step to protect your account","MyBento accounts are protected by two-factor authentication: a one-time code sent to your email address on top of your password. On a browser you use regularly you can choose to be trusted for thirty days, so the code is asked for less often.","2026-08-20",{"src":8,"alt":9},"\u002Fassets\u002Fimages\u002Fupdates\u002F2026-08-trusted-devices\u002Fotp-trust.jpg","The MyBento verification step, showing the code field and a Trust this device for 30 days checkbox",{"_path":11,"_dir":12,"_draft":13,"_partial":13,"_locale":14,"title":4,"description":5,"subTitle":15,"publishedAt":6,"draft":13,"image":16,"intro":17,"audiences":18,"body":20,"_type":113,"_id":114,"_source":115,"_file":116,"_stem":117,"_extension":118},"\u002Fupdates\u002F2026-08-trusted-devices","updates",false,"","Signing in takes a one-time code as well as your password, so a password on its own is not enough to reach your pay and your paperwork.",{"src":8,"alt":9},"Your MyBento account holds your payslips, your bank details, your ID documents and your benefit paperwork. That is worth more than one password protects, so signing in takes a second step: a one-time code, sent to the email address on your account.",[19],"Employees",{"type":21,"children":22,"toc":107},"root",[23,32,38,43,54,60,65,78,86,92,97,102],{"type":24,"tag":25,"props":26,"children":28},"element","h2",{"id":27},"why-a-code-as-well-as-a-password",[29],{"type":30,"value":31},"text","Why a code as well as a password",{"type":24,"tag":33,"props":34,"children":35},"p",{},[36],{"type":30,"value":37},"Passwords leak. They get reused across sites, guessed, phished, or turned up in a breach\nof somewhere else entirely, and the person holding yours does not have to be anywhere\nnear you to try it.",{"type":24,"tag":33,"props":39,"children":40},{},[41],{"type":30,"value":42},"A one-time code closes that off. It is generated fresh each time you sign in, it is sent\nto your email rather than shown anywhere, and it expires. Someone with your password and\nnothing else gets as far as the code screen and stops there. To go further they would\nneed your inbox too.",{"type":24,"tag":33,"props":44,"children":45},{},[46],{"type":24,"tag":47,"props":48,"children":53},"img",{"alt":49,"height":50,"src":51,"width":52},"The verification step, asking for the code sent to your email address",420,"\u002Fassets\u002Fimages\u002Fupdates\u002F2026-08-trusted-devices\u002Fotp-code.jpg",560,[],{"type":24,"tag":25,"props":55,"children":57},{"id":56},"trusting-the-browser-you-use-every-day",[58],{"type":30,"value":59},"Trusting the browser you use every day",{"type":24,"tag":33,"props":61,"children":62},{},[63],{"type":30,"value":64},"Security you resent is security you work around, so a code every single time would be the\nwrong trade on a laptop only you use.",{"type":24,"tag":33,"props":66,"children":67},{},[68,70,76],{"type":30,"value":69},"Underneath the code field is ",{"type":24,"tag":71,"props":72,"children":73},"strong",{},[74],{"type":30,"value":75},"Trust this device for 30 days",{"type":30,"value":77},". Tick it and MyBento\nremembers that browser: your password is enough for the next month, and the code step is\nskipped. It is unticked by default, because being trusted should be something you choose\nrather than something that happens to you. On a shared or borrowed computer, leave it\nalone.",{"type":24,"tag":33,"props":79,"children":80},{},[81],{"type":24,"tag":47,"props":82,"children":85},{"alt":83,"height":50,"src":8,"width":52,"caption":84},"The same step with Trust this device for 30 days ticked below the code field","Unticked unless you choose it.",[],{"type":24,"tag":25,"props":87,"children":89},{"id":88},"how-the-trust-is-held",[90],{"type":30,"value":91},"How the trust is held",{"type":24,"tag":33,"props":93,"children":94},{},[95],{"type":30,"value":96},"Each browser is trusted on its own. Trusting your laptop does not trust your phone, and\nnothing you do on your account affects anyone else's.",{"type":24,"tag":33,"props":98,"children":99},{},[100],{"type":30,"value":101},"Trust does not roll forward every time you use it. Thirty days after you set it, the code\nis asked for once more, and you can trust the device again from there. That is deliberate:\na device you stop using drops out of trust on its own rather than staying trusted\nindefinitely.",{"type":24,"tag":33,"props":103,"children":104},{},[105],{"type":30,"value":106},"If you lose a device or pass it on, changing your password ends its trust along with\neverything else.",{"title":14,"searchDepth":108,"depth":108,"links":109},2,[110,111,112],{"id":27,"depth":108,"text":31},{"id":56,"depth":108,"text":59},{"id":88,"depth":108,"text":91},"markdown","content:updates:2026-08-trusted-devices.md","content","updates\u002F2026-08-trusted-devices.md","updates\u002F2026-08-trusted-devices","md",1790452228652]