Steps
- Open Security. Click your name at the top right and click Security, or go to /security in the back office.
- Add a passkey. Under Two-step verification, click Add a passkey and follow your device's prompt: Windows Hello, Face ID, a fingerprint or a security key. Nothing to type at sign-in.
- Or add an authenticator app. Click Add an authenticator app, scan the QR code with an app such as Google Authenticator or Microsoft Authenticator, or type the key. Enter the 6-digit code and click Turn on.
- Or add text-message codes. Click Add text-message codes, enter your Mobile number, click Text me a code, type the code you receive and click Turn on.
- Save your recovery codes. Copy or Print Your recovery codes and keep them away from the computer. Each code gets you in once if you lose your phone or passkey, and they are shown only once.
- Review your devices. Under Where you are signed in, check each device and click Sign out on any you don't know, or Sign out everywhere else to keep only this one.
- Require it for everyone. An admin can tick Require two-step verification for everyone under Company rule. Every user then sets it up at their next sign-in.
Signing in with two-step on
After your password, the sign-in asks you to confirm it is you. Use your passkey, the code from your authenticator app, or a code by text. If you can't use any of those, click Use a recovery code and type one of your saved codes.
Tips
A passkey is the easiest and hardest to phish. Add a second method as a backup. Before changing these settings, the page may ask for your password again to confirm it is you. If you get an email about a sign-in from a new device that wasn't you, use its Not me link and change your password.
- Make new recovery codes if you've used most of them
- Remove a method you no longer have with Remove
- Text codes need mobile signal at sign-in
Frequently asked questions
What happens if I lose my phone?
Sign in with your password and use one of your recovery codes instead of the app code. Then open Security, remove the old authenticator, add the new phone and click Make new recovery codes so the old ones stop working.
Which authenticator apps work with SeroPOS?
Any standard authenticator app that reads a QR code and shows 6-digit codes, such as Google Authenticator, Microsoft Authenticator or 1Password. Scan the code on the Security page, or type the key if you can't scan.
Does two-step verification affect the till?
It protects sign-ins to the web back office. The Company rule makes every user set it up at their next back office sign-in, so tell staff before you turn it on.