This article is for users who use the Gusto mobile app. It explains how Gusto uses biometric authentication — Face ID, Touch ID, or Android device biometrics — to approve sensitive changes like updating your direct deposit.
Quick note: Biometric approval is different from the 2-step verification you use to sign in. You will still sign in the same way. Biometric approval only kicks in when you make a sensitive change after you sign in.
Biometric authentication is a faster, more secure way for you to approve sensitive actions in Gusto. Instead of typing in a code sent by text message, you approve actions in the Gusto mobile app using Face ID, Touch ID, or your Android device's biometrics.
It's like unlocking your phone — quick and tied to your device.
For now, Gusto uses biometric approval for one sensitive action: Updating your direct deposit or paycheck splitter (the bank account information you use as an employee).
For everything else, you keep using SMS codes or your existing 2-step verification method.
You can use biometric authentication when all of these are true. Confirm each one:
You're an employee, contractor, or admin.
You have 2-step verification turned on. Any method works — SMS or authenticator app.
You have the latest version of the Gusto mobile app on iOS or Android, and you are signed in.
You are making a supported change. Right now, that means updating your direct deposit or paycheck splitter.
Gusto gradually turns on biometric approval for eligible employees. If you do not see the prompt yet, your account may not be enabled. There is nothing to set up — Gusto turns it on automatically when your account is ready. Until then, you will continue to verify sensitive changes via SMS or your existing 2-step verification method.
When you make a sensitive change, Gusto walks you through these steps:
Start the change on the Gusto website or in the Gusto mobile app.
Gusto tells you: "For your security, please approve this change in the Gusto app."
Open the push notification on your phone within 60 seconds. If it expires, you can ask for a new one or use SMS.
Tap Approve. Verify with Face ID, Touch ID, or your Android device biometrics.
Gusto saves your change automatically.
If something goes wrong, you can always switch to SMS verification on the same screen.
If you do not have the Gusto mobile app installed, you can still make sensitive changes using an SMS code. Here is how:
When you start the change, choose Verify with SMS.
Enter the code Gusto sends to your phone.
Gusto saves your change.
For the fastest, most secure experience, we recommend downloading the Gusto mobile app from the App Store or Google Play.
If you get a push notification for an action you did not start, treat it as a warning sign. Someone may be trying to get into your account.
Take these steps right away:
Tap "No, this wasn't me" to block the action.
Gusto will offer to help you change your password. We strongly recommend doing this right away — changing your password signs you out of every active session on web and mobile.
Review your recent account activity. Look for anything you do not recognize.
If you think someone has gotten into your account, contact Gusto's Assurance team. See our Prevent fraud article for details.
If something is not working as expected, find your issue below and try the steps in order. You can always switch to SMS verification on the same screen if you need to unblock the action right away.
If you did not get a biometric push notification, try these steps in order:
Make sure the Gusto mobile app is installed on your phone and you are signed in.
Check that push notifications are turned on for the Gusto app in your phone's settings:
iOS: Settings → Notifications → Gusto.
Android: Settings → Apps → Gusto → Notifications.
Check your internet or cellular connection.
If the push still does not arrive, switch to SMS verification on the same screen.
If Face ID, Touch ID, or your Android biometric is not authenticating you in the Gusto mobile app, try these steps:
Make sure Face ID, Touch ID, or your Android biometric is turned on in your phone's settings.
Try again — you can retry up to 3 times.
If you fail 3 times, Gusto automatically offers SMS as a backup.
On some devices, your device PIN also works to approve.
Push notifications expire after 60 seconds. If yours expired, here is what to do:
Tap Resend on the web prompt to get a new push.
Or switch to SMS verification on the same screen.
If the web page keeps spinning while it waits for your approval, try these checks:
Check that you got the push notification on your phone.
If you did not get the push, follow the steps in "I didn't get a push notification" above.
Or switch to SMS verification on the same screen.
The web page automatically completes once you approve it on your phone.
Q: Do I need to set up biometric authentication?
A: Yes, when you download the mobile app, you have to opt in to turning on biometric authentication to speed up login.
Q: Does this replace 2-step verification when I sign in?
A: No. You still use your existing 2-step verification method to sign in. Biometric approval is required only for sensitive actions after you sign in.
Q: Does Gusto store my fingerprint or face data?
A: No. Your biometric data stays on your device. Gusto only sees whether your device confirms your identity.
Q: Can I turn biometric authentication off?
A: You cannot turn it off, but you can always choose SMS verification on the screen where Gusto asks for approval.
We will update this article as Gusto adds more biometric authentication actions.