As an admin or employee, you can set up 2-factor authentication for your Gusto Retirement account and resolve common access issues.
How 2-factor authentication (2FA) works depends on how you sign in. If you sign in through Gusto, you use Gusto's existing 2FA — there is no separate 401(k) 2FA to set up. If you sign in directly through Gusto Retirement, you need to set up and manage 2FA in your retirement dashboard, as described below.
This applies if you sign in directly through Gusto Retirement. If you sign in through Gusto, you use Gusto's own 2FA — there is nothing extra to set up here.
You can receive your verification codes through text messages or an authenticator app. You can also set up both methods, which gives you flexibility if you lose access to a device or change your phone number.
To set up 2-factor verification:
Sign in directly at the Gusto Retirement sign-in page.
Go to Settings in the main menu.
Select Personal settings.
Click Security.
Click Enable 2FA.
Based on the method you select, find your next steps below.
To set up an authenticator app:
Download an authenticator app on your mobile device. Here are some trusted options:
Google Authenticator
Authy
Sign in to your retirement dashboard on a separate device (such as a computer).
Select Authenticate with an app to display a QR code.
Open the authenticator app on your mobile device and scan the QR code.
To find the QR code scanner, you may need to go to the app's settings and select Add a new account.
Type the 6-digit code that appears next to Gusto, Inc. (Older versions may still display as Guideline, Inc.) in your authenticator app into the Gusto Retirement prompt.
Note: If you can't scan the QR code, you can manually enter a code into your authenticator app to generate the 6-digit code.
Codes refresh regularly and are only valid for a short time. If your code expires, revisit the authenticator app to view the new code.
After you enter the code, your 2-factor authentication is set up. Each time verification is required, you'll need to open your authenticator app to retrieve the new code. You won't receive a pop-up notification or text.
Text message verification is only available for US and Canada-based phone numbers. If you have a phone number outside these locations, you need to use an authenticator app.
To set up text message verification:
Sign in directly at the Gusto Retirement sign-in page.
Select Send me a text to receive a 6-digit verification code.
Enter the phone number where you'd like to receive text messages.
Click Confirm. This number will be used for 2-factor authentication purposes only.
Type the 6-digit code you receive from Gusto Retirement into the webpage prompt.
After you enter the code, your 2-factor authentication is set up. Each time verification is required, you'll receive a new text with the code.
If you'd like to set up both verification methods, visit the 2-factor authentication section again and complete the process for the other option. Once you set up both methods, you can choose how you'd like to retrieve your codes each time they're required.
If you have access to more than one Gusto Retirement account (such as a Gusto 401(k) and a Gusto IRA), once you enable 2-factor authentication, the setting will apply across all your linked accounts.
This applies if you sign in directly through Gusto Retirement. If you sign in through Gusto, you use Gusto's own 2FA — there is nothing extra to set up here.
If you currently have access to your account and want to change your verification method or update your phone number, follow these steps in your retirement dashboard:
Sign in directly at the Gusto Retirement sign-in page.
Click Settings in the main menu.
Select Personal settings.
Go to the Security tab.
Click Edit 2FA and follow the prompts.
This applies if you sign in directly through Gusto Retirement. If you sign in through Gusto, this 2FA prompt follows Gusto's own sign-in security instead.
You'll be prompted for 2-factor authentication when:
Signing in from a new device
Signing in after a period of time (for security reasons, we ask you to verify your account on a semi-regular basis)
When prompted, you can choose to remember a device for future sign-ins.
This applies if you sign in directly through Gusto Retirement. If you sign in through Gusto, contact Gusto support for sign-in issues instead.
Find your issue below for help.
First, double-check that the code you entered exactly matches the code you received, with no dashes or spaces.
If you're using an authenticator app:
Make sure you're entering the code displayed for "Gusto, Inc." (older versions may still display as "Guideline, Inc.") if you use the same authenticator app for other sites
Codes are only valid for a short period. If your code expires before you enter it, go back to the app and enter the new code displayed.
There are several reasons why you may not be receiving verification codes via text:
You set up an authenticator app instead of text messages
Codes won't be sent to you as a text or pop-up notification. You need to open your authenticator app (such as Google Authenticator or Authy) on your phone to get the code for "Gusto, Inc." (older versions may still display as "Guideline, Inc.").
Your phone number is incorrect or has changed
You need to contact us to reset your account. After we reset it, you can update your phone number by following the steps in the "How to change your 2-factor authentication preferences" section above.
Your network connection is down or disabled
If an outage occurs or your phone is in airplane mode, you may not receive text communications. Try going back to the sign-in page and requesting a text message code again once your connection is restored. If the outage lasts for an extended period, contact us for assistance.
Your phone is blocking messages from unknown senders
Turn off this setting in your phone or text message settings. Then go back to the main sign-in page and request a new text code.
If you're still not receiving your verification code via text message, contact us, and we can help reset your account. You'll be asked to provide personal or account information for verification and security purposes.
How to regain access depends on your verification method.
Text message verification
If you keep the same phone number you entered when activating 2-factor authentication, you'll still receive security notifications on your new device. There should be no interruption in your verification capabilities.
If you have a new phone number, contact us to reset your 2-factor authentication. You'll be asked to provide personal or account information for verification and security purposes.
Authenticator app verification
If you set up an authenticator app, you need to download the app on your new device. You should then be able to sign in to the authenticator app using your phone number or username and password.
If you need help restoring and accessing your authenticator account, see the directions provided by Google Authenticator, Authy, or the app you use.
Pro tip: This is why setting up both verification methods can be helpful. If you lose access to one method, you can still sign in using the other.
If your authenticator app isn't working properly, go to your mobile app store and make sure you have the latest version. If you don't, update the app and try again.
If you can't sign in to your authenticator app and need help restoring your access, see the directions provided by Google Authenticator, Authy, or the app you use.
If you've tried these steps and still can't access your account, contact us, and we can reset it. You can then reconfigure your 2-factor authentication options in your dashboard. You'll be asked to provide personal or account information for verification and security purposes.