We take the security of your account seriously. All Ramp accounts are enrolled in multi-factor authentication (also known as two-factor authentication, MFA, and 2FA) based on your provided account details. You can use:
- Authenticator devices (see below)
- Phone (configured automatically)
- Email (only when others are unavailable)
Jump to:
- Verifying login attempts
- Sharing verification codes
- Configuring your phone
- Configuring an authenticator
- Using your authenticator
- Removing an authenticator
- Lost authenticator (help me log in!)
- I don't see my code
Verifying login attempts
When you log in to Ramp from a new device with a username and password you will be prompted to verify your login attempt. If you have configured an authenticator (see below), you can use that authenticator here. Otherwise, we will send a login code to your on-file phone number or email address. These login verification codes are valid for 5 minutes: if you were unable to successfully enter it during the valid time frame, you may re-send a new code.
If you log in to Ramp and click Trust This Device? from the same device you will not be prompted to verify your login each time. If you log in to Ramp using Sign In with Google or Sign In with your Identity Provider, you will not be prompted to verify your login each time.
Sharing verification codes
To keep your financial account safe, never share verification codes anywhere or with anyone. Ramp support will never contact you to request a login verification code; such a request may be a phishing attempt from an attacker masquerading as a Ramp employee.
If you receive a request to share a Ramp verification code, do not respond.
Configuring your phone
When you enroll a mobile phone with Ramp, we automatically set it up to receive verification codes. No further configuration is required on your part. Learn how to update your phone number here.
Configuring an authenticator
An authenticator app is a mobile or computer application that adds an extra layer of security to online accounts by generating a one-time password (OTP) for two-factor authentication (2FA).
You can configure up to five authenticators (such as Google Authenticator, Twilio Authy, etc.) to access your account without using your phone number.
Follow these steps to add an authenticator:
- Go to Settings > Personal Settings > Security
- Click Configure multi-factor authentication.
- Click Add authentication device and follow the on-screen instructions.
If you have previously enrolled an authenticator, you will see all your existing devices.
If you have not previously enrolled an authenticator, you will not see this list.
Using your authenticator
Your authenticator should look something like this screenshot with 6-digit codes. The one you set up with Ramp will be titled Ramp: your email. See the highlighted entry below as an example.
When prompted to enter your authenticator's verification code, enter the 6 digits in your authenticator that are titled Ramp: your email. In the example below, it would be 717 164.
Removing an authenticator
Please note: If you no longer have access to the authenticator app, please contact our support team for further assistance.
Follow these steps to remove an authenticator if you can still use that authenticator to verify the action:
- Go to Settings > Personal Settings > Security
- Click Configure multi-factor authentication.
- Click the X to remove the device and follow the on-screen instructions OR submit the legacy authenticator to remove the one you don't have access to
Finally, delete your Ramp account in your authenticator app:
- In Google Authenticator, press and hold the account. Press the pencil icon and then the trash icon.
- In Twilio Authy, go to Settings -> Accounts and tap the delete button.
Lost authenticator (help me log in!)
If you have lost access to your enrolled authenticator, you can log into your account by switching to send a verification code to your enrolled phone number instead.
Once you have regained access to your account, refer to the Removing an authenticator section above to remove the authenticator that you no longer have access to. This ensures the lost authenticator cannot be used to sign in to your account in the future.
If you're experiencing this issue and you're outside the US, please contact our support team. We would be happy to assist you.
Please note: If your phone number has changed, you can update this yourself, or your admin can update this for you. More details about this can be found here.
I don't see my code
If you expect a code to be sent and it never arrives, you should check your Spam inbox to see if Ramp got flagged as an unknown sender. In this case, you must mark the message as "Not spam".
If you're experiencing this issue and you're outside of the US, please contact our support team and we would be happy to assist you.