How do I turn on two-step verification?
Add a code from an authenticator app to your sign-in, and keep recovery codes for a lost phone.
Step by step
- Sign in at waise.app, go to "My stores" and find the "Security" card.
- Press "Turn on two-step verification".
- In an authenticator app (Apple Passwords, Google Authenticator, 1Password and others) add an account and scan the code. Or type the key shown under "Or type this key into the app".
- Type the 6-digit code the app shows now and press "Confirm and turn on".
- Save your 10 recovery codes now. They are shown once. Each works one time, in place of the app's code.
After the password, sign-in asks for the 6-digit code from your app. Someone who learns your password still cannot get into your stores without your phone. It is a recommendation, never a requirement: while it is off, the account page shows a calm banner, and "Remind me later" hides it for 7 days (three times at most).
Turning it on signs your other devices out. Waise emails the account address when it is turned on or off.
Signing in with it
The password, "Continue with Google" and the password-reset link all end at the code step. Tick "Remember this device for 30 days" to skip the code on that browser. Any change to the two-step settings ends every remembered device.
Five wrong codes end that sign-in attempt, and you start again from the password. The attempt itself waits ten minutes.
If you lose your phone
- Type a recovery code instead of the app code.
- No recovery codes left? Write to the Waise team. They reset the verification after making sure it is you. "Forgot my password" never turns it off.
To make new codes (the old ones stop working), open "New recovery codes" on the Security card and type a code from your app. To turn verification off, open "Turn off two-step verification" and type your password plus a code from the app or a recovery code.
Team members inside the store admin
Each team member can protect their own login too. Go to Settings, Team and security, "Account sign-in", and use "Two-step sign-in for your account". In the app choose "Add account", then "Enter a setup key", and paste the key. This gives 8 backup codes. Turning it off needs your password and a code. Nobody can turn it on or off for someone else.
The owner signs in to the store through the Waise account, so the owner's protection is the Waise account's two-step verification. Turning off the store-admin version needs only the code from the app.
Questions
Which apps work?
Any authenticator app that makes 6-digit codes, such as Apple Passwords, Google Authenticator, Microsoft Authenticator or 1Password.
The code is rejected.
Type the code showing right now. Check that the time on your phone is set automatically. A code works only once.
Updated