How 2FA Works

Two-Factor Authentication (2FA) adds an extra layer of security by requiring a second verification step when logging in.

Resellers can enable:

• SMS authentication
• Email authentication (read how to set this up in this article)
• Or both methods together

Mobile Number Requirement

• SMS authentication uses the mobile number saved on your reseller account
• If the number is incorrect or outdated, you may not receive your verification code
• Ensure your account details are up to date before enabling SMS 2FA

Notifications

You Will Receive Notifications When:

• Any 2FA settings are updated, such as:
  • SMS authentication is enabled or disabled
  • Email 2FA is enabled or disabled

These notifications confirm changes to your account security.

Remembered Devices (30 Days)

When logging in with 2FA, you can choose to remember your device.

• If selected, you won’t need to complete 2FA again on that device for 30 days
• After 30 days, you’ll be prompted to verify again
• This applies only to the specific browser/device used

This helps reduce repeated verification on trusted devices while maintaining security.

Using Both Email and SMS 2FA

If both authentication methods are enabled:

• You may be prompted to verify using one of the available methods
• In some cases, you may be able to choose your preferred option
• Both methods remain active as backup options

Benefits:

• Provides flexibility if one method is unavailable
• Improves account recovery options
• Enhances overall security coverage

Security Behaviour

To protect accounts from unauthorised access:

• Multiple failed login attempts may result in:

  • A temporary lockout (e.g. after 3 failed attempts)
  • A cooldown period (e.g. 10 minutes)

   

FAQs

1. Why am I not receiving a code when logging in?

Check:

• Your mobile number on your account is correct
• Your device has signal or internet access
• Your spam/junk folder (for email codes)

If issues continue, contact support.

2. Can I enable both SMS and email authentication?

Yes. You can enable both methods for added flexibility and security.

3. Which method will be used if both are enabled?

The system may:

• Automatically select one method, or
• Allow you to choose (depending on setup)

4. What happens if I don’t have access to my phone?

If email 2FA is enabled, you can use email instead.
If not, contact support for access recovery.

5. Why am I being asked for 2FA again after previously selecting “remember me”?

The 30-day trust period may have expired, or:

• You’re using a different device/browser
• Cookies/cache were cleared

6. What happens after multiple failed login attempts?

• Your account may be temporarily locked
• You’ll need to wait before trying again
• No notification is sent at this time