Security

Two-factor codes by email, trusted devices, changing your sign-in email, signing out everywhere and resetting your password.

Last updated

What it is#

Your account holds your customers' names, addresses and access instructions, so signing in takes more than a password. Every account signs in with a password and a 6-digit code emailed to you. The code lasts 10 minutes, and only the newest code counts.

Everything about signing in is in Settings, in the group Your business, under Security and sign-in.

When to use it#

Use it when you sign in on a new phone or computer, when you change the email address you sign in with, when a device is lost or sold, or when you have forgotten your password.

How to do it#

  1. To skip the code on a device you use every day, tick Don't ask for a code on this device for 7 days when you enter the code. The device is trusted for 7 days, then asks again.
  2. To see those devices, open Settings and go to Security and sign-in. Under Trusted devices, each one shows the browser, when it was added, last used and when it expires. Press Remove to make a device ask for a code again.
  3. To change the address you sign in with, press Change sign-in email. Enter the code sent to your current address and press Continue. Type the New sign-in email and press Send the code, then enter the code sent to the new address and press Change my sign-in email.
  4. If a device is lost, press Log out of all devices. It ends every other signed-in session and forgets every trusted device. The device you are using stays signed in.
  5. To change your password, sign out and press Forgotten password? on the sign-in screen. Enter your email and press Send reset link. The link works for 60 minutes. Choose the new password and press Set password. You are then signed out everywhere and sign in again with the new password.

What your customer sees#

Nothing. This is for you only.

What happens next#

If you leave the app open with no activity for 4 hours, it signs you out. Five minutes before, it asks Still there? and you can press Stay signed in. After a sign-out for inactivity, the sign-in screen tells you why.

Ten wrong passwords in 15 minutes locks sign-in for 15 minutes.

Good to know#

  • Two-factor by email is on for every account from the start. You can turn it off with Turn off two-factor authentication, which needs a code, but it is not advised: your password alone would then sign you in.
  • Trusted devices only shows while two-factor is on.
  • There is no change password control in Settings. Forgotten password? on the sign-in screen is the way to change it.
  • A password needs at least 10 characters, cannot be a commonly used password and cannot be your email address.
  • Sign-in and security emails always send, whatever you choose under Notifications.
  • Team members and customers do not sign in. Their pages open from a private link, so nothing here changes what they see.

Not what you needed? Contact us and say what you were trying to do.