Two-step verification for your account
Protect your store with a code from an app on your phone after your password, so nobody gets in with your password alone.
With two-step verification on, every sign-in asks for a 6-digit code from an authenticator app on your phone. Someone who only knows your password won't see any of your store's data.
Before you start
Install any authenticator app on your phone, like Google Authenticator, Microsoft Authenticator, 1Password or Authy. They're all free and work the same way.
Turn it on
- Can't scan? Choose Enter a setup key in the app and type the key shown under the code.
- The app now shows an Apexfy account with a 6-digit code that changes every 30 seconds. Enter the current code under Verification code and click Turn on.
Signing in after that
Enter your email and password as usual, then open the app and type the code it shows. One code per sign-in is all it takes.
Turning it off
In the same place (account button → Two-step verification), click Turn off two-step verification. After that, your password alone signs you in.
Lost your phone?
Email [email protected] from the email address on your account. Once we confirm it's you, we turn off two-step verification for your account, so you can sign in with your password and set it up again on your new phone.
Require two-step verification for your team
As the store owner, you can stop anyone on your team from opening the store until they turn on two-step verification:
- Turn on two-step verification for your own account first, and sign in with the code.
- Click Require for team. If some members haven't set it up, we tell you how many before you confirm.
From then on, anyone without two-step verification sees a screen asking them to set it up when they sign in, and goes straight into the store once it's done. To turn it off, click Stop requiring in the same place.


