Two-factor authentication
The business owner’s account needs two-factor authentication (2FA): every sign-in asks for your password and a six-digit code from an authenticator app on your phone, such as Google Authenticator, Microsoft Authenticator or 1Password. Someone who learns your password still can’t open your panel without your phone.
Setting it up
Section titled “Setting it up”The first time you sign in, the panel asks you to turn 2FA on before anything else. Until you do, no page of the panel opens.
- Choose Enable 2FA.
- Scan the QR code with your authenticator app. If it can’t scan, type the secret shown under the code into the app instead.
- Enter the six-digit code the app shows, and choose Confirm.
- Ten recovery codes appear. They’re shown only this once: store them somewhere safe, away from your phone.
- Choose Go to the panel.
From then on, the login form asks for the app’s code after your password, and sensitive changes in the panel ask for one too. Settings shows two-factor authentication as enabled.
Each code works once: if a code was just used, wait for the app’s next one. After 5 wrong codes in a row, no code is accepted for 15 minutes.
Your customers
Section titled “Your customers”Customers sign in with their password only. 2FA is required for the business owner, because the owner’s account controls money, prices and providers.
If you lose your phone
Section titled “If you lose your phone”Sign in with one of your recovery codes: enter it in the code field instead of the app’s code. Each recovery code works once, and you get an email saying how many are left.
If you have no recovery codes left, or lost them too, contact the platform. After it confirms you own the business, it can reset your 2FA. You then sign in with your password and set 2FA up again with your new phone.