How do I turn on two-step sign-in?

Two-step sign-in asks for a 6-digit code from an app on your phone after your password. Even if someone learns your password, they cannot get in without your phone. Turn it on in Security › Two-step sign-in by scanning a QR code and typing one code.

Where to find it

Admin › Administration › Security › Two-step sign-in (প্রশাসন › নিরাপত্তা › দুই-ধাপের লগইন).

The link shows for the office jobs: Super Admin (the store owner), Admin and Manager. Each person turns it on for their own login, on their own phone.

Step by step

Install an authenticator app on your phone from the Play Store or App Store: Google Authenticator, Microsoft Authenticator or Authy.
In the panel, open Two-step sign-in. The status shows Off, with a QR code.
In the app, press + and choose to scan a QR code. Scan the code on the screen.
Cannot scan? Choose to enter a setup key in the app and type the Setup key shown under the QR code.
The app now shows a 6-digit code for your shop's admin. Type it in the box and press Turn on.
Your backup codes appear. Write them down or take a photo and keep it safe. They are shown only now.

How it works

From the next sign-in, after your username and password, a page asks for the code. Open the app and type the 6 digits it shows now.
The code changes every 30 seconds, and each code works once.
Tick Trust this device for 30 days on that page to skip the code on your own computer or phone.

Good to know

Your phone's clock must be right. The codes are made from the time. Set the phone to take the time from the network.
In the app, the entry is named after your shop with "admin" after it, and your username.
Turn it off on the same page with a code from the app or a backup code, unless the owner has made it a must for your job.
The owner can make it a must for Super Admin, Admin and Manager.

Common problems

"That code is not right. Type the 6 digits the app shows now." The code changed while you typed, or the phone's time is wrong. Fix the time and type the newest code.
"Too many wrong codes — wait … seconds." After 6 wrong codes, the sign-in page makes you wait up to 5 minutes.
You changed phones. Before you wipe the old one, sign in, turn two-step off with a code, and set it up again on the new phone.

Still need help? Ask in our Facebook group — the team and other shop owners answer there.

Ask the community →