Two-factor authentication (2FA) adds a second verification step when your staff log in, on top of their password. With 2FA enabled, you can also set a login timeout, which automatically logs staff out after a period of inactivity. Together these protect the member data in your club from unauthorised access, especially on shared or unattended devices.
Important: 2FA and the login timeout apply to your staff users only. They do not affect how your members or customers log in.
Note: 2FA is an optional add-on and may not be included in your plan. To check whether it is available for your club, or to have it switched on, click the chat button to contact our Customer Success team.
Why use it
Stronger sign-in: a second verification step makes it harder for anyone to access your club account with a stolen or shared password.
Protection on shared devices: a login timeout logs staff out of an unattended reception PC, so member data is not left exposed.
Set to suit your club: you choose how long staff can stay inactive before they are logged out.
Turning on 2FA
2FA is switched on by ClubRight for your club, not from within your settings. To enable it, click the chat button to contact our Customer Success team. Once 2FA is active, your staff complete a verification step when they log in, and the login timeout setting becomes available.
Setting the login timeout
The login timeout controls how many minutes of inactivity pass before a staff user is automatically logged out. It only takes effect when 2FA is enabled for your club. To set it:
Go to the Settings menu in the top-right corner of the admin dashboard and select Club Info.
Scroll down to the Login Timeout field.
Enter the number of minutes of inactivity after which staff should be logged out. For example, enter 15 to log staff out after 15 minutes without activity.
Select Save Changes in the top-right corner to apply it.
What happens when the timeout is reached
When 2FA is enabled and a login timeout is set, staff are logged out automatically after the period of inactivity you chose. To get back in, they log in again with their credentials and complete the 2FA verification step. If no timeout is set, the default session lasts one month.
How do I switch between my clubs on a computer?
If your login has access to more than one club, click your name at the bottom of the left-hand menu and choose Change Club. The Switch Club page opens. Under Select a club to continue, click the club you want to move to.
On a phone, tap your profile picture or initials at the top right of the screen to open the same menu.
If the page says "There are no member profiles available", your login only has access to the club you're signed in to. To work at another club as well, the owner of that club needs to add you as staff using the same email address you sign in with.
The first time you switch to another club in a browser, you may be asked for a one-time code sent by email. See below.
Why do I get a code by email when I switch club?
When you switch to another club, or change between profiles at different clubs, ClubRight emails you a one-time password. This one-time authentication code goes to the email address on your staff record at the club you're switching to. That's the same email address you sign in with.
The email comes from app@clubright.co.uk with the subject Your one time password. It's sent straight away, at any time of day, and the code lasts 15 minutes. You can ask for up to 5 codes an hour.
Once you've entered the code, that browser (or the app) is remembered for 30 days, for all your staff records that use the same email address. In a browser, the 30 days start again each time you switch club. You'll be asked for a new code if you sign out, clear your cookies, or use a different browser or device.
⚠️ Note: clubs can't switch off the code when switching club.
Why does the code go to the owner when my staff switch club?
If staff switch club while signed in with the owner's login, the codes keep going to the owner's email address. To fix this, each person needs their own login, added at each club with their own email address:
The owner adds the staff member at the second club, using the same email address the staff member already signs in with.
The staff member signs in with their own login and switches to that club once, entering the code from their email.
ClubRight then links their records. After that, they won't need a code when switching club, on any device.
What if I'm still asked for a code every time I switch club?
Click the chat button to contact our Customer Success team. This can happen, for example, if your record at the other club already has its own separate login, or if you only ever sign in with emailed codes and have never set a password.