How do I enroll in 2-Step Security for Online Business Plus?
Registering for Online Business Plus 2-Step Security
If it’s your first time registering for the 2-Step Security (a.k.a. Multi-Factor Authentication) then please follow the steps below:
Setting up 2-Step Security
![]() |
Step 1: Download Google Authenticator from the App store on your mobile device |
![]() |
Step 2: Go to the Online Business Plus login page |
![]() |
Step 3: Click on “2-Step Security Login“ |
![]() |
Step 4: Then click on “2-Step Security Registration“ |
![]() |
Step 5: Enter your Online Banking Plus User ID and Password then click “Submit“.
If you are a new Online Business Plus user and have never logged in before, the system will prompt you to change your temporary password provided to you by Cash Management. Your new password must be a minimum of eight (8) characters in length and alphanumeric. Proceed with changing your password and click “Continue” to begin registration of your Soft Token. If you are an existing Online Business Plus user, then you do not need to change your password and can proceed with registering your Soft Token . |
![]() |
Step 6: Open your Google Authenticator application. You will be given two options “Scan a QR Code” or “Enter a setup key.”
Choose “Scan a QR Code” and use the camera that appears when using the application to scan the QR code that populates. If it does not open automatically, touch the “+” symbol in Google Authenticator and choose “Scan a QR Code“.
DO NOT attempt to scan the QR code in the picture on the left as it is only shown as an example. Use the application camera instead of backing out and using your phone camera to scan the QR code. Note: If you see the following error “We were not able to process your request, if you require further assistance please call: 604-877-7000 or toll free 1-888-Vancity; or please email technical support.” Please ignore the error as we are working to resolve this issue. |
![]() |
Step 7: Point the camera of your mobile device to scan the QR code shown on your Online Banking Plus login screen. |
![]() |
Step 8: Once you have scanned the QR code a 6 digit code will display. |
![]() |
Step 9: Enter the 6-digit code that is displayed in the Google Authenticator app in the One time Code Field and click on “Submit” (please click submit once and DO NOT double click submit). |
Step 10: You are now logged in to your account. Every time you wish to log in to Online Business Plus, simply open the Google Authenticator application on your phone and enter the 6-digit code displayed into the login screen along with your User ID and password. |
Q&A
Question: What is 2-Step Security?
Answer: 2-Step Security is a method of authenticating a user by confirming two factors of authentication: a username, password and a Soft Token on a mobile device. The token is required to access Online Business Plus.
Question: What are Soft Tokens and are they mandatory?
Answer: Soft Tokens are mandatory for Online Business Plus users. Soft Token is installed on your trusted mobile device. The device must have Google Authenticator app installed for the security process to work.
Question: How do I login to Online Business Plus?
Answer: The login URL is: https://onlinebusinessplus.vancity.com/business/default.jsp?inst=/bus/bc/vancity/bus/&app=Business
Users need to enter their own User ID, a password and a 6-digit code from a soft token (refer to 2-Step Security below).
Question: Do I have to pay for a Token?
Answer: There is no charge for Soft Tokens.
Question: If I use the Soft Token on my smartphone will I be charged for data usage?
Answer: The Google Authenticator is a free app for your mobile device that does not require WIFI or data connectivity (i.e. in Airplane Mode). The data is only used during the initial download of the app to your device.
Question: Can I share my token?
Answer: No. Tokens are security devices and cannot be shared or reassigned.
Question: We just had an employee leave and another employee start, can we assign the token to the new employee?
Answer: No. Tokens are security devices and cannot be shared or reassigned. Please contact CashManagement@vancity.com and we will be happy to assist.
Question: Do tokens expire?
Answer: Soft tokens do not expire.
Question: I have replaced my iPhone (or smart device). How do I get a new Soft Token?
Answer: Please contact Cash Management team at CashManagement@vancity.com and we will be happy to assist.
Question: I have multiple different user ID’s that I use for different purposes. Is it possible to get a single token assigned to all of them?
Answer: For security reasons, there is no option to assign a single token to multiple user ID’s. If you are setup with multiple User IDs, a better user experience is to choose the Soft Token and the Google Authenticator app will store all your tokens for the various User IDs on your mobile device.
Question: I lost my token, how do I get a new one?
Answer: Please contact Cash Management Team at CashManagement@vancity.com
Question: Who do I contact if I have any additional questions?
Answer: Please contact the Cash Management team at CashManagement@vancity.com and we will be happy to assist with any inquiries.