Two-step authentication using Shopify mobile prompts as a backup method

Shopify mobile prompts uses a mobile device to receive a message when you log in that asks you to confirm that you are trying to log in to your account.

Shopify mobile prompts can only be used as a backup two-step authentication method. You must set up one of the following authentication methods as your primary method:

• Authenticator app
• Security key or Biometrics
• SMS text message

The Shopify app must be installed on the mobile device that you use for Shopify mobile prompts.

Tip

If you don't want to rely on a mobile device, then you can have an additional built-in authenticator option that connects to the authentication method used for your computer, such as PIN, Touch ID, or Windows Hello.

It's also safer to activate an additional method of two-step authentication as a backup method when using built-in authenticator options.

Benefits of Shopify mobile prompts

It's recommended to use Shopify mobile prompts instead of text message (SMS) verification codes to help you secure your account for the following reasons:

• Attackers might try and steal authentication codes sent through SMS. Shopify mobile prompts help protect you against attackers by sending them more securely to only your signed in devices.
• Shopify mobile prompts give more information on any login attempts to your account. This information includes the device, location, and time.
• You can quickly block suspicious activity using Shopify mobile prompts. If you didn’t try to sign in to your account, then tap No on the notification to secure your account.

Before you begin

Before you set up Shopify mobile prompts, make sure that you complete the following:

• Set up a primary authentication method.

• Install the Shopify app on the mobile device that you use for Shopify mobile prompts. If you already have the Shopify app installed on your mobile device, make sure that you have the most recent version.

• Log in to the Shopify app on that device.

Set up Shopify mobile prompts

1. Log in to the Shopify app on the mobile device that you want to use to receive push notifications.

2. From your Shopify admin, click your username and account picture.

3. Click Manage account > Security.

4. In the Two-step authentication section, click Add another method.

5. Enter your password, and then click Next.

6. From the Authentication method list, select Shopify Mobile prompts.

7. Select the mobile device that you want to use to receive notifications. If your device isn't on the list of available devices, then verify the following:

   • You have the most recent version of the Shopify app installed on your mobile device.
   • You're logged in to the Shopify app on that device.

8. If your device wasn't on the available list, then after you log in to the Shopify app on that device, you need to perform the following steps again:

   1. In the Two-step authentication section, click Add another method.
   2. Enter your password, and then click Next.
   3. From the Authentication method list, select Shopify Mobile prompts.
   4. Select the mobile device that you want to use to receive notifications.

9. Click Send mobile prompt. A test message is displayed on the device that you selected.

10. On your mobile device, tap Approve. You receive an email message that states that you have activated Shopify Mobile prompt as a backup method.

11. From your Shopify admin, click Complete.

12. Save your recovery codes in case you lose access to your mobile device. Make sure that you store them in a safe location offline that you can access in multiple ways, such as from your mobile device, your desktop computer, and from a printed document.

Now when you log in, you can use your mobile device for two-step authentication.

Activate two-step authentication notifications

If you don't receive notifications after you set up Shopify mobile prompts, then you might need to verify that you have activated Security updates and Multi-factor authentication for the Shopify app on your mobile device.

Steps: