Each time you log into your account on a new device we require a few things to ensure it’s you:
- An email address and password
- A verification code sent to your two-step verification method
How it works
Two-step verification (sometimes called 2FA or MFA) protects your Wealthsimple account by requiring a unique, time-sensitive verification code each time you log in on a new device. You can receive your verification codes in one of 2 ways:
- Authenticator app (such as Google Authenticator)
- Phone number (either a text message or automated phone call)
Why it’s important
Two-step verification is a layer of protection against bad actors and cybercriminals. If someone gains access to your email address, without two-step verification they might be able to access other accounts like Wealthsimple. By requiring a unique, time-sensitive verification code when you log in, we know it’s you. It’s one of the ways we keep your account safe.
Understand the difference between the two verification methods
An "authenticator" is a type of app that generates verification codes. Popular choices include —
- Apple passwords
- Google Authenticator (iOS, Android)
- Microsoft Authenticator (iOS, Android)
- Authy (iOS, Android)
The most secure two-step verification method available, authenticator apps have other benefits —
- They’re easy to use. Open the app to copy and paste a new verification code when needed.
- They work without cell service or wifi. This is helpful when you’re low on signal or travelling abroad.
- They’re one of the best ways to protect yourself online. Your verification code resets usually every 30 seconds, making it difficult to steal.
- And because your verification codes are generated on your own mobile device, we know it’s you.
We can send your verification codes to a verified phone number. Just keep in mind that a phone number can only be linked to one Wealthsimple account at a time.
- It’s convenient as most phones will automatically copy and paste your verification codes for you. This can help save you time.
- You have options as we can send your verification codes by text message or an automated phone call.
- We support mobile, landline (a.k.a. home phone), and fixed VoIP phone numbers.
- We support phone numbers from Canada and the U.S.
Update your two-step verification method
You can change the way you receive verification codes by following these steps:
- Sign in to the Wealthsimple app on your mobile device
- Tap the Profile icon at the bottom of the screen
- Tap the Settings menu item
- Under Security tap Two-step verification
- Follow the prompts to change your method
- Log into my.wealthsimple.com and sign in to your Managed Investment & Save profile
- Click your name on the top right side of the screen
- Select Settings from the drop-down menu
- Click Security from the top left menu bar
- Scroll down to Two-Step Verification and follow the prompts
Find or use your recovery code
When you set up two-step verification, we’ll show you a recovery code. Write this down and keep it somewhere safe. If you’re unable to receive a verification code, you can use your recovery code to access Wealthsimple from a web browser.
To use your recovery code —
- Visit my.wealthsimple.com from a web browser
- Enter your email address and password
- Choose Log in
- Choose Use a recovery code and enter it
- Follow the steps above to set up two-step verification with your new authenticator app or phone number
Below are some troubleshooting tips based on common problems clients face:
Your verification code isn't working when using an authenticator app
Be quick: To keep you safe, authenticator apps replace your verification code with a new one every 30 seconds. Pay attention to the countdown in the authenticator app when copying the code to ensure you have enough time.
Check your clock: Your device’s date and time are used to generate your verification codes, so it’s important they’re set automatically. Steps for iOS, Android, Windows, and macOS, are here.
Your verification code isn't working when using a phone number
Try unblocking Wealthsimple in your contacts: You may have previously blocked Wealthsimple from sending you text messages. Text START to 28849 to confirm you’re okay to receive text messages from us.
Wait 1 minute before requesting a new verification code, and always use the newest: When you request a new verification code, the old one expires but may still be on the way. For example, if you’ve requested 2 codes, wait for 2 codes to arrive before requesting another one. Only the newest code will work.
Try requesting an automated voice call instead: Sometimes the mobile network or text message provider experiences delays in delivering text messages. Choosing an automated voice call may be faster.
You can’t receive verification codes (lost phone, deleted the app, etc.)
If something has changed (like your email or phone number) and you're having a hard time receiving your verification code to log in, here's what you can do:
- If you have your recovery code, follow the steps above.
- If not, contact our support team to help recover your account. We’ll ask you a few questions before helping you set up a new way to receive verification codes. Your account’s security is important to us, so account recovery is offered exclusively over the phone.
Frequently asked questions
How do I turn off two-step verification?
Two-step verification is required for all Wealthsimple accounts. It’s easy and protects your account from bad actors more effectively than a password alone. You can learn more about two-step verification at GetCyberSafe.gc.ca.
How often will I need a verification code?
You should be prepared to enter a verification code each time you use Wealthsimple, though most clients will only encounter it when logging into a device we don’t recognize.
To make things easier, we offer Quick access on the Wealthsimple app. This uses your device’s fingerprint, facial recognition, or a passcode, instead of a verification code. Learn how to set it up here.
And when logging into our website, you can choose to Remember this device for 30 days.
Someone asked for my verification code, what should I do?
We will never ask for your verification code or recovery code. You should never share them with anyone.
If you contact our Client Success team, we may send a security code to help verify it’s really you. It won’t come from your authenticator app, and cannot be used to log into your account.
I don’t have a mobile phone, what should I do?
You have options:
- You can link a landline or fixed VoIP phone number. Each time you log in you can choose the Call me instead button for an automated voice call. The automated voice will read your verification code out loud.
- Authenticator apps are available for mobile phones, tablets, laptops, and desktops. It could even be an old phone you have lying around without cell service. If you’d prefer using your laptop or desktop, many of our clients use Authy for Windows, macOS, or Linux.
I often travel or have poor cellular reception. Which option should I choose?
Authenticator apps work without cellular reception or wifi. If you plan to travel, switch to an authenticator app. It’ll ensure consistent access to your Wealthsimple account.
How do I receive my verification codes by email?
The ability to receive verification codes by email will soon be discontinued. If you currently receive verification codes by email, we recommend following the steps above and upgrading to either an authenticator app or your phone number. We’ll help everyone upgrade later this year.
We understand that for some clients, using an authenticator app or phone number isn’t possible. During the upgrade process later this year, we’ll help you learn more about alternatives.
Please sign in to leave a comment.