2FA Becomes Mandatory on January 12. Yes, on Purpose.
Starting January 12, 2027, a code gets added to your password.
On January 12, logging in will take a few extra seconds. Here's why I'm asking anyway.
You'll get an email about this. Then a reminder in December. Then a last one on January 5. It's not to pester you: it's because the date is fixed, and I don't want you to discover it at the same moment as the page that asks for it.
Starting January 12, 2027, two-factor authentication becomes mandatory on all AdocSys client accounts. In practice: your password, then a code. You set the code up once. It takes five minutes.
Three things I keep seeing
This isn't theory. It's the kind of call I get.
The reused password. An old account, on a site you've forgotten about, gets breached. The address and the password show up in a list, and they still work here. Nobody targeted your business. Chance picked your name.
The WordPress site. A plugin that hasn't been updated in two years, the same password for the site and for the email, and it's done. The site stays up. It's the email that starts sending strange things.
The domain. That's the one that hurts most. Your domain name is your company's name. A transfer makes no noise, and the first you hear of it is a site that no longer answers.
Your AdocSys account controls your hosting, your domains and your mailboxes. It isn't an invoice in a portal. It's the keys. One lock for all of that isn't enough.
How it works
At your first login after January 12, if you haven't set anything up, the setup screen appears before you can get into your account. Two choices:
- an authenticator app on your phone — 1Password, KeePassXC, or any other app of the same kind. That's what I recommend.
- a text message on your mobile, if you prefer that.
The code changes on its own, at a regular interval. There's no "remember this device": the code is asked for at every login. That's the price, and it's two seconds.
Why not email
Because most of the time, the mailbox and the account fall together. If your email password is the same, the code arrives in the same inbox as the reset link. A second factor that travels with the first isn't a second factor.
I know email would be simpler. That's exactly why I'm not offering it.
Nothing happens over the holidays
The date is January 12, a Tuesday. Not December 24, not January 2. Nobody gets locked out over the holidays, and nobody has to think about this between Christmas Eve and the first day back at the office.
This was supposed to happen at the start of the year. I didn't finish it, and I'm not going to pretend otherwise. January 12 is the date I can actually hold with the holidays in the middle — not the one that would have made me look best.
You can set up 2FA today. Two months ahead is two months of not thinking about it.
And if you log in on January 12 just to pay an invoice: the payment link in the invoice email works without logging in. That hasn't changed.
Three things I refuse to tell you
That this is an emergency. It isn't. Nothing is burning, and nobody loses a service on January 13. It's a decision to make with a calendar in front of you, not a panic in your inbox.
That it's unbreakable. It isn't a vault door, it's a second lock. It stops a stolen password. It doesn't stop a scam where someone talks you into giving them the code yourself. If someone calls pretending to be us and asks for your code: that's a scam, and we will never ask.
That I have something to sell you with it. There's nothing to buy, nothing to install on your side, and it doesn't change your invoice.
If you're not sure
Call me. We'll do it together, live, in five minutes. If you don't have a smartphone, we'll install the app on your computer: it works just as well, and it's the same job.
The full guide, with screenshots: Two-Factor Authentication (2FA)
support@adocsys.net · 1 877 749-9579 · adocsys.com
