Look, I get it—security isn’t exactly the sexiest topic in the agency world. But you know what is sexy? Not getting hacked. 🔥
In the latest HighLevel town hall, Mario Aldayuz dropped some much-needed updates around Two-Factor Authentication (2FA)—and if you’ve been putting it off, this is your sign to lock it down.
Let’s break down what’s new, why it matters, and how you can use this to protect your agency and your clients.
What’s New?
HighLevel now supports 2FA with authenticator apps like:
- Google Authenticator
- Authy
- Microsoft Authenticator
(Pretty much anything other than a post-it on your monitor.)
You can also enter manual backup codes—a lifesaver if you lose your phone or can’t receive SMS for any reason. 🙌
Why You Should Care (Even If You Think You’re Safe)
We all say we’ll set up 2FA “later,” but here’s the truth:
- Agencies hold client data, payment info, pipeline visibility, and way more than they realize.
- A single breach can tank your reputation and lead to real financial loss.
- Most hacks happen not from complex code-breaking, but from lazy security habits.
And if you’ve got VAs or team members logging in from random Wi-Fi spots… yeah, it’s time.
Action Steps
Here’s what I recommend you do today:
- Turn on 2FA in your agency and all your subaccounts.
- Use an authenticator app instead of relying on SMS.
- Store your backup codes in a secure password manager (or somewhere safe that isn’t your desktop screenshot folder 😅).
- Help your clients do the same—especially those handling sensitive stuff (looking at you, medical and legal folks 👀).
Pro Tip
If you’re onboarding clients into HighLevel, include a quick 2FA setup as part of your launch process. It makes you look more professional and adds a layer of protection for everyone involved.
Less support tickets. More peace of mind. Win-win. 🧘♂️
Frequently Asked Questions
What’s New?
HighLevel now supports 2FA with authenticator apps like: Google Authenticator Authy Microsoft Authenticator(Pretty much anything other than a post-it on your monitor.) You can also enter manual backup codes—a lifesaver if you lose your phone or can’t receive SMS for any reason. 🙌
Why You Should Care (Even If You Think You’re Safe)?
We all say we’ll set up 2FA “later,” but here’s the truth: Agencies hold client data, payment info, pipeline visibility, and way more than they realize. A single breach can tank your reputation and lead to real financial loss. Most hacks happen not from complex code-breaking, but from lazy security habits. And if you’ve got VAs or team members logging in from random Wi-Fi spots… yeah, it’s time.
What should I know about action Steps?
Here’s what I recommend you do today: Turn on 2FA in your agency and all your subaccounts. Use an authenticator app instead of relying on SMS. Store your backup codes in a secure password manager (or somewhere safe that isn’t your desktop screenshot folder 😅). Help your clients do the same—especially those handling sensitive stuff (looking at you, medical and legal folks 👀).
Start Your HighLevel Free Trial
Browse all GoHighLevel guides · Marketing.