What happens if my client doesn't receive their passcode?

Passcodes can take a minute or two to arrive and are valid for 10 minutes. If the code still hasn't arrived, the client can click Resend Passcode on the verification screen to request a new one. Ask them to check their spam folder if it's still not appearing.

Can I use Secure Access with Passcode on a template?

Yes — enabling it on a template means every request created from that template will require a passcode by default, saving you from enabling it manually each time. You can still adjust the setting on individual requests if needed.

Does the passcode entry get recorded?

Yes — the passcode verification is captured as part of the request's audit trail, alongside the magic link access and any signatures collected. This gives you a documented record that the correct person accessed and completed the request.

How do I add two-factor authentication to a document collection workflow?

Secure Access with Passcode works similarly to two-factor authentication — clients verify their identity first via magic link and then with a one-time passcode sent separately by email or SMS. It's a practical way to add identity verification to your document collection without requiring clients to create an account or install anything.

How can I make sure the right person is signing my documents?

Combining Gatheroo's magic link, Secure Access with Passcode, and a Signature field gives you a strong chain of identity verification: the client must be at the right email address, enter a one-time passcode, and actively sign. This is suitable for most business document collection purposes, though for legally critical documents seek specific legal advice.

Secure Access with Passcode — Protect Sensitive Gatheroo Requests

What this does:
Secure Access lets you add an extra layer of protection to a specific request. When enabled, clients must enter a passcode before they can open the request link.

This means that even if someone else intercepts the email and clicks on the link, they won’t be able to see any of the information until they have entered a separately sent Passcode.

This code changes each time they access the request for security reasons. This also removes the need for them to remember a password or code over time.

How to turn on Secure Access:

Open the request you want to protect.
Go to the Request Settings tab.
Find the Access section.
Toggle Require Passcode on.
Depending on your plan, you may be able to select for the code to be sent by SMS.
Click Save.

Secure your own account by enabling 2FA

Set up 2FA