Two-factor authentication (2FA)

Two-factor authentication adds a second step when you sign in: a 6-digit code from an authenticator app on your phone. Even if someone learns your password, they cannot sign in without that code.

Two-factor authentication is for the business owner's account. Staff accounts cannot turn it on.

Before you start

Install an authenticator app on your phone, such as Google Authenticator or Authy.
Pick a safe place, away from your phone, to keep your recovery codes.

1. Open Two-Factor Auth

In the dashboard, open the menu under your name at the top. While two-factor is off, it shows Configure 2FA: select it. You can also open Account settings from My Businesses and select the Two-Factor Auth tab.

The card shows Enabled or Disabled. The dot on the tab is green when it is on and amber when it is off.

The card tells you plainly whether two-factor is Enabled or Disabled on your account today.

2. Connect your authenticator app

Press Enable 2FA. Scan the QR code with your authenticator app. If you cannot scan it, type the key shown under Or enter this key manually: into the app.

Never share the QR code or the key. Anyone who has them can make codes for your account.

Scan the square with your authenticator app, or type the key underneath it.

3. Confirm with a code

Type the 6-digit code your app shows now, then press Verify & Activate. If the code changes before you finish, type the new one.

If you see Setup expired. Please start again., press Enable 2FA again and scan the new QR code.

Type the six digits your app is showing, then press Verify & Activate.

4. Save your recovery codes

When it worked, you see Save Your Recovery Codes. The codes are shown only this once. Press Copy All Codes and keep them somewhere safe that you can reach without your phone.

Each code works once. Press Done only after you have saved them.

Signing in with two-factor on

After your password, the sign-in page asks for the 6-digit code from your app. If your phone is not with you, press Use a recovery code, or Send code to email instead to get a code by email.

5. Turn two-factor authentication off

Press Disable 2FA, enter the current code from your app under Authenticator Code, then press Confirm Disable. After that, only your password protects your account and your businesses.

Turning it off also removes your recovery codes. You get a new set if you turn it on again.

Result

The card shows Enabled and the dot on the tab is green. From now on, the sign-in page asks for the 6-digit code from your app after your password.

Was this guide helpful?

More in Profile

Your profile and preferencesUpdate your name and phone number, choose your language and theme, and change your password in Account settings.2 min read Set your own POS PINApprovers set a personal 4-digit PIN once in Account settings and use it to approve protected actions at the POS in every business.2 min read Change your POS PINChange the 4-digit PIN you use to approve actions at the POS from the POS PIN tab of Account settings.1 min read Finish your profileFill every missing part of your profile, from your date of birth to your phone and two-step verification, until the ring reads Profile complete.2 min read

Still need help?

Our team answers every ticket, in English and Arabic.

Open a ticket Contact us