Two-factor authentication helps to enforce information security in your admin. Once it’s enabled, the system will send a verification code to the account owner via email during the logging process. The account owner must put the correct email address, password along with the correct verification code within a limited time.
Merchants can set up this feature for “Account Owners” and “Admin Panel” separately:
- To enable two-factor authentications for Account Owners
- To enable two-factor authentications for Admin Panel (can be enabled only by the shop owner’s email)
I. To enable “Two-factor authentications” for Account Owners
Each account owner can decide to enable this setting or not. If it’s enabled, the account owner has to go through the authentication process when logging in. If not, the login process would be the same.
Expand the menu in the upper right corner of your admin panel and click "My Profile"
Tick the box of “Enable Otp” and click “Save”. You will be redirected back to the login page. Please login again with the correct email and password.
After submitting the correct login info, you will proceed to two-factor authentication. Please move to your email inbox for a set of 6-digit verification code, key it in the field as below, and click “SUBMIT” to login.
The verification code email would be shown as below:
II. To enable two-factor authentications for Admin Panel (can be activated only by shop owner’s email)
First of all, this feature can be activated only by shop owner’s email. Once it is enabled, all the pages in the admin panel can only be accessed by the accounts who have already gone through two-factor authentication.
That is, if the shop owner has enabled two-factor authentication for the admin panel, each staff account must go turn on two-factor authentication settings in the “My Profile” page for access authority.
Shop owner can move to Settings > Admin & Security Setting > click on the tab “Two-Factor Authentication Setting”
Turn on “Two-Factor Authentication Setting” > Click “Update”.
Please notify ALL staff account owner to activate the setting in “My Profile” page and refer to instruction I
If the staff account owner log in without going through the authentication process, they will see the following message when accessing any pages in the admin panel.
Two-Factor Authentication is currently under testing and it does not support in the following pages: Image Gallery, Taxes Settings, Form Builder, Product Reviews pages and Retail Store, which means the staff account can access the above pages even though they haven't gone through two-factor authentication process.