Enabling two-step authentication for staff accounts

Staff members can enable two-step authentication for their accounts. This means that the staff member will have to enter two things when they log in: their password, and a code that they will receive either as an SMS message or through an authenticator app.

The staff member has to be the one who sets their two-step authentication — the account owner or another staff member can't enable it on their behalf.

Note

Account owners can't enable two-step authentication on behalf of a staff member, but they can disable it on a staff member's account.

Enable two-step authentication for a staff account

A staff member can set up their own two-step authentication from the Shopify admin.

To enable two-step authentication:

  1. Have the staff member log in to their account with their email and password.

  1. In the Staff members section, click the staff member's name:

    Click staff member name
  2. In the Two-step authentication section, click Enable two-step authentication:

    Click enable two step authentication
  3. Have the staff member enter their password and click Confirm to continue.

  4. In the Enable Two-Step Authentication dialog, have the staff member select if they want to receive an SMS with a code or if they'd like to use an authenticator app to generate a code for them. Click Next:

    Select option then click next
  5. Depending on the delivery method that the staff member chooses, they will have to enter a phone number to receive an SMS with an authentication code or configure an authenticator app supported by Shopify and generate an authentication code. Have the staff member enter the authentication code and click Confirm:

    Enter code and click confirm
  6. Review the information about backup codes, and then click Done to finish.

Two-step authentication in now enabled on the staff member's account. Next time they log in to their account, they will have to enter an authentication code in addition to their password.

Disable two-step authentication for a staff account

A staff member can disable two-step authentication and log in with just their email and password.

Note

The account owner can't enable two-step authentication on behalf of a staff member, but they can disable it on a staff member's account.

To disable two-step authentication:

  1. Log in as a staff member or as the account owner.

  1. In the Staff members section, click the name of the staff member:

    Click staff member name
  2. In the Two-step authentication section, click Disable two-step authentication:

    Click disable two step authentication
  3. In the dialog, click Disable two-step authentication to confirm:

    Click disable two step authentication button

Two-step authentication is now disabled. The staff member will now be able to log in with just their email and password.

Want to discuss this page?

Visit the Shopify Community

Ready to start selling online with Shopify?

Try it free