Published Last updated Written and reviewed by the Resale Intelligence team
Turn on 2FA with an authenticator app: scan the QR code, enter the 6-digit code and save your recovery codes. Owners and store admins must do this first.
Two-factor authentication (2FA) means entering a 6-digit code from an app on your phone each time you sign in. Even if someone learns your password, they can't get into your account without that phone.
Store owners and store admins must turn on 2FA before they can use the system. Some other roles must turn it on within a set time; see Who must use 2FA and how long they have.
Before you start
-
Install an authenticator app on your phone, such as Google Authenticator, Microsoft Authenticator or any app that supports TOTP.
-
Decide where you will keep your recovery codes, for example written on paper in a safe place or in a password manager.
Turn on 2FA
Tap the circle with your initial at the top right and choose Security.
On the Two-factor authentication (2FA) card, tap Enable 2FA.
Enter your password and tap Confirm. If you land back on the same page, tap Enable 2FA again.
Open the authenticator app and Scan the QR code with your authenticator app. If scanning doesn't work, type the key shown after Or enter this key: into the app instead.
Type the 6-digit code the app shows into Authentication code and tap Confirm and enable.
Save the recovery codes that appear straight away. They are shown only this once.
When it works, the card shows Enabled. Next time you sign in, the system asks for the 6-digit code after your password.
What recovery codes are
You get 8 recovery codes. Each one can be used once instead of the 6-digit code when you don't have your phone. There is no download button and the same set is never shown again. See 2FA recovery codes and changing phones for how to keep them and make a new set.
If the 6-digit code doesn't work
-
The code in the app changes every half minute; use the latest one.
-
Set your phone's clock to automatic. If the phone's time is off, codes won't match.
-
Make sure you use the right entry in the app if you have 2FA for several services.