To strengthen store security, enable Two-Factor Authentication (2FA) for logins and report exports to protect your data. When staff members log in or export reports, they must complete 2FA using your configured method to proceed.
In this article, you'll find:
Before you begin, please note: We recommend that you do not share store accounts or staff accounts. Sharing accounts poses security risks, and if unusual activity or unauthorized use occurs, it will be difficult to trace the related records.
1. Enable Two-Factor Authentication
When your store switches from a trial plan to a paid plan, the system will automatically enable Two-Factor Authentication 7 days later. After that, every staff member must complete two-factor authentication to log in or export reports.
Step 1
In the SHOPLINE Admin, go to [Settings] > [Permission & Security], and select the "Security Setting" tab.
*Note: Only the Store Owner can view, operate, and configure these settings.
Step 2
The "Two-factor authentication for login and report export" toggle is switched on and grayed out (locked).
*Notes:
- This feature currently cannot be disabled by the store. If you need to change this setting, please contact the Online Merchant Success Team.
- Once the feature is enabled, all staff members, including the store owner, will be logged out of the online store admin in about 15 minutes and will need to complete 2FA on their next login.
- Once enabled, the following store reports require two-factor authentication to download:
Step 3
Select "Authenticator".
Step 4
After completing the above steps, click Update to save.
2. Authenticator Verification
Step 1
Open the App Store or Google Play on your mobile device, search for and install an authenticator. Once installed, click Installed, continue.
Step 2
- Open the authenticator app.
- Select "Scan QR code / Enter setup key" to get the 6-digit verification code.
- Enter the 6-digit verification code in the field below.
- Click VERIFY.
Scan QR Code / Enter Setup Key
The following uses Google Authenticator as an example. Tap the "+" icon in the bottom right of the Authenticator app and select "Scan a QR code" or "Enter a setup key".
Google Authenticator |
QR Code | Setup Key |
|
|
|
*Note: A circular icon will appear to the right of the verification code in Google Authenticator as a timer. A new verification code will automatically appear when the time is up.
3. Email Verification
Please go to your registered email inbox, open and check the 6-digit verification code email, enter the code, and click SUBMIT.
Verification Code Email
The verification code is valid for 5 minutes. If it expires, please click RESEND on the login page.
4. Notes
-
If you manage multiple stores, the system will select the verification mechanism with the highest security weight as your login authentication.
Security weights from high to low are: Authenticator Verification > Email Verification.
Example
Person A is an administrator for the following stores simultaneously. The system determines the login verification method based on the highest security weight; therefore, Person A's login verification method is "Authenticator Verification".
Store Name Login Verification Method Flower Shop Email Verification Book Store Authenticator Verification Shoe Store Email Verification -
If a store administrator has enabled Authenticator but needs to regenerate the verification QR Code, please contact the Store Owner. If the Store Owner has enabled Authenticator but needs to regenerate the verification QR Code, please contact the Online Merchant Success Team.
Administrator Authenticator Regeneration
1. The Store Owner goes to Admin > [Settings] > [Permission & Security] > Edit.
2. Find the "Enabled Authenticator" field.
3. Click Regenerate QR Code.
Read more
Last updated: 19 October 2026
Comments