Keeping your account safe

Your Sahora login gives access to payroll and personal data, so keep it safe. This guide covers your devices, your password, two-step verification and the activity log.

See where you are signed in

1. Click Devices at the top of any page. (On a phone, open sahora.ph/devices if the link isn't shown.)
2. Your devices lists every browser or phone signed in to your login, with the device, the approximate place, when it was last used and when it signed in. The one you are using is marked This device.
3. To sign out a device you don't recognise or no longer use, click Sign out beside it. To sign out everywhere else at once, click Sign out all other devices and confirm.

A device signed out here has to sign in again on its next page.

Change your password

There is no separate "change password" page. Use the reset link:

1. Click Sign out.
2. On the sign-in page, click Forgot password?.
3. Type your email and click Send reset link.
4. Open the email, click the link, click Continue and choose your new password.

Sahora emails you each time your password is set or changed. If you get that email and it wasn't you, reset your password at once and contact support@sahora.ph.

Two-step verification

Everyone except employees enters a 6-digit code from an authenticator app at each sign-in, and keeps two authenticators: one on your phone and a backup on another device or app.

• Changing phones: move the codes to the new phone with your authenticator app's own transfer option, or sign in with your backup authenticator in the meantime.
• Lost both, or need an authenticator removed: contact Sahora support at support@sahora.ph. Sahora support resets your two-step verification: it removes your authenticators and signs your login out on every device. You get an email "Your Sahora two-step verification was reset", and at your next sign-in you set up two authenticators again. Your company's owner can't do this; only Sahora support can.

See Signing in for the first time for setting up an authenticator.

Sign-in protections

• Too many wrong passwords or codes lock the login for a short time. You see how long to wait; you can also reset your password.
• Idle sign-out: after a period without activity, Sahora signs you out, even if you closed the browser. You see "You were signed out after a period of inactivity."
• On a shared or borrowed device, always click Sign out when you are done.

The activity log (owners)

1. Open Activity log in the company menu.
2. Filter by Who, Area, From and To, then click Show. Clear removes the filters.

The log records every change to your company's payroll records: who, what and when, with the values before and after. Government and bank numbers stay encrypted in it, and the log can't be edited or deleted. Downloads with full government or bank numbers, and every time someone views a full number, are recorded too.

Good to know

• Never share your login. Give each person their own on the Users page, with only the role they need. See What Sahora does and who does what.
• When someone leaves your company, switch their login off or remove their access on Users. See Users and roles.