Security & Platform Changes in MYOB Acumatica 2026.1

This release brings a meaningful tightening of sign-in security, alongside several deprecations worth putting on your calendar now.

Passkeys are in, email 2FA codes are out

The headline addition is passkeys as a new sign-in option — phishing-resistant, tied to your device, and with no shared secret for an attacker to intercept. The ATO has confirmed passkeys meet authentication requirements on their own. Alongside that, 2FA is becoming mandatory: from 2026.1.1, all People Payroll users on a People or Full User Licence must use 2FA via MYOB ID. And if you're relying on email for your 2FA codes, it's time to switch — from 1 September 2026, email won't be available as an authentication method for new users, and the option disappears entirely in 2027. Head to myaccount.myob.com/account/security now and switch to an Authenticator App or SMS before you get caught out.

Microsoft Exchange Web Services (EWS) and REST APIs are Retiring

There are also a few platform deprecations to plan around. Microsoft Exchange Web Services (EWS) is being retired by Microsoft, so it's phasing out of MYOB Acumatica from 1 October 2026 — this affects sites with Exchange Integration or Scheduled Processing on build 2025.1 or older, and the fix is to upgrade to Build 2025.2.2 or 2026.1.1 before that date (Microsoft's own limited EWS extension buys you until 1 April 2027 at the outside). Separately, Chromium is deprecating XSLT support from 17 November 2026, which will break unsupported versions of MYOB Acumatica's Classic UI (not Modern UI) in Chrome and Edge — sites on 2024.2 or older need to upgrade to Build 2025.2.4 or 2026.1.1 by that date, or switch temporarily to Firefox or Chrome's Origin Trial. And for anyone integrating via the REST API, the Login method (username and password) becomes obsolete in 2026.1.1 ahead of eventual removal — integrations need to move to OAuth 2.0 or OIDC authorization instead.

Beyond security, this release also brings platform-level enhancements including expanded 2FA enforcement, DAC browser improvements, enhanced meter widget configuration, Generic Inquiry enhancements, better control over date-time values in pivot tables, login screen improvements for Active Directory users, and tag-based file management.

Need help with navigating the changes?

• Book a System Review with BusinessHub to make sure you're covered

• Join MYOB Discover Online on Tuesday 20 October 2026 at 12pm AEDT.