Turn on two-factor login for your staff

Available on Standard and above

Two-factor login needs the Standard or Enterprise plan.

Compare plans

Two-factor login adds a second step when your staff sign in. After the password, they type a 6-digit code from an authenticator app on their phone. Someone who steals a password still can’t get in.

Before you start

• Every staff member needs a phone with an authenticator app, for example Google Authenticator, Microsoft Authenticator or Authy.
• Only someone allowed to change settings can turn it on. Usually that’s the shop owner.

Everyone is signed out

When you turn this on, every staff member is signed out straight away, on every computer and phone. Pick a quiet moment and warn your team first.

Turn it on for your shop

1. Go to Settings › App & account › General settings. On a phone: More › System › Settings, then App & account › General settings.

2. Click Edit.

3. Turn on Require two-step login for staff.

   

   Desktop

4. Click Save.

   All staff are signed out, including you.

What each person does at their next sign-in

1. Sign in with email and password as usual.

   The Set up two-factor authentication screen opens.

2. Open the authenticator app and scan the QR code. If you can’t scan, type the key shown under Or enter this key manually.

3. Type the 6-digit code from the app.

4. BytePhase shows Save your backup codes. Copy or Download them and keep them somewhere safe. Then tap I’ve saved my codes.

From then on, each sign-in asks for the 6-digit code from your authenticator app.

Done!

Your shop now asks every staff member for a code from their phone at each sign-in.

Good to know

• Lost phone? On the code screen, tap Use a backup code and type one of the saved codes. Each code works once.
• New backup codes. Open your profile menu and choose Two-factor login. Click Regenerate backup codes and enter your password. The old codes stop working.
• Turning it off for yourself. In the same place, click Disable 2FA and enter your password. While your shop still requires it, you’ll be asked to set it up again at your next sign-in.
• The code is only asked while the shop setting is on. Setting up an authenticator from your profile menu alone doesn’t add the step. On Lite and Basic, the shop setting isn’t shown.

Something not right?

• Turning on two-factor login signed everyone out
• See or sign out the devices using your login: See and sign out your signed-in devices