Keeping your shop safe

Two-factor authentication

Every staff account needs it. Until yours is set up, the admin asks you to do that first.

1. Open My Profile from the user menu at the top right.
2. Under Two Factor Authentication, press Enable.
3. Scan the QR code with an authenticator app, or type the setup key. Enter the code it shows and press Confirm & finish.
4. Keep the recovery codes somewhere that is not your phone. They are shown once; Regenerate Recovery Codes makes new ones.

From then on you type a code from the app each time you sign in.

Signed-in devices

My Profile, Browser Sessions lists where you are signed in. Log Out Other Browser Sessions signs out every other device, after you type your password.

Your connections

Stripe and Mollie are connected through their own sign-in, with nothing to paste. MyParcel, Sendcloud and the Google and Twitch sign-in apps use keys. If one of those leaks, make a new one at the service and paste it into the app under Apps.