Onvio login security overview

Thomson Reuters is working to help strengthen security for all tax-related software.

Security enhancements

  • Password strength: A strong password contains a minimum of eight characters, with at least one uppercase letter, one lowercase letter, one number, and one special character.
  • Timeout period: After 4 hours of inactivity, Onvio will time out and you will be required to re-authenticate using your credentials — although access is suspended, the operation of the application is not, so processes such as long print jobs will continue during the timeout.
  • Multi-factor authentication: Thomson Reuters provides multi-factor authentication through the Thomson Reuters Authenticator app and accepts TOTP-compliant third-party multi-factor authentication apps. See Determine which multi-factor authentication option is right for you to learn more about these options.

What is multi-factor authentication?

Many of your online accounts or software applications are currently protected by a login and password. That password is the single factor in the authentication process — the way that those applications or services confirm your identity. Unfortunately, passwords are easily stolen or hacked, which means that the accounts and data behind those passwords are at risk.

Multi-factor authentication adds at least one more layer of identity verification to that process so your protection against hacking and fraud attempts is stronger and more secure than a simple password. That additional factor can take many forms, such as a physical ID card, a digital confirmation code, or even your fingerprint. You're using multi-factor authentication every time you pay a transaction using a debit card or when you withdraw cash from an ATM: your PIN is one factor and the card itself is another.