Why does QuickBooks Online ask for a code to change account information?

QuickBooks Online verifies sensitive account changes with a one-time confirmation code. If you change the email address, user ID, or password on your account, Intuit may ask you to sign in again. It then emails a code that you must enter before the change is saved.

A second check on sensitive changes

Intuit protects QuickBooks Online sign-in details with multifactor authentication, known as MFA. A password alone can be stolen, reused, or guessed, so a second step confirms that whoever makes a change also controls the account’s email inbox. The confirmation code is that second step.

The check covers sign-in details: the email address on the account, the user ID, and the password. Ordinary work in your books, such as entering transactions or running reports, does not trigger it.

What triggers the confirmation code?

Expect the code when you update any of the following:

the email address on the account
your user ID
your password

Intuit may ask you to sign in again before the code appears. The two steps together confirm that the request comes from you rather than from someone who only has your password.

You may also receive a code when signing in from a new device or browser. That check guards every entry to your account. The code described here is narrower: it appears only when your sign-in details themselves are being changed. Both come from Intuit, and either is safe to use when you started the action.

Entering the code correctly

The code arrives by email from an automated Intuit sender, so a reply to that message will not reach anyone. Enter the code exactly as it appears when the screen prompts you. One-time codes do not stay valid indefinitely, so use it promptly rather than saving the message for later.

Once the correct code is accepted, your account changes are saved and the screen confirms it.

If the email never arrives

A missing code is usually a filtering problem rather than an account problem. Things to check:

your junk or spam folder, where automated messages often land
that you are watching the inbox Intuit has on file for the account
a few minutes of patience, then request a new code from the same screen

If the address on the account is out of date, the code may go to an inbox you can no longer open. Update your email before you lose access to the old one. At that point the way forward is Intuit’s account recovery process, not another attempt at the code.

A code you never requested?

A code you did not ask for means someone may be trying to change your sign-in details. Do not enter it, and do not share it with anyone. A legitimate support agent will not call or email you asking to read the code aloud.

If you can still sign in, change your password right away. Then report the attempt through Intuit’s own support channel. Only Intuit can see or change an Intuit account; E-Tech is independent and works with QuickBooks data, not with Intuit sign-ins.