Two-Factor Authentication (2FA) for User Accounts

Two-Factor Authentication (2FA) – Overview

Two-Factor Authentication (2FA) adds an extra layer of security to admin logins in Control Center. In addition to entering a username and password, admins must verify their identity using a second factor — typically a one-time verification code sent to the authorized email address.

This ensures that even if login credentials are compromised, unauthorized access is prevented, protecting sensitive business data and account settings.

Two-Factor Authentication (2FA) will be mandatory for all accounts starting October 1, 2025. 

1. Reaching 2FA Settings & Configurations

To reach "2FA Settings & Configurations," follow the steps below:

1. Step 1: Log into Control Center
2. Step 2: Choose Point of Sale 
3. Step 3: Choose Maintenance
4. Step 4: Choose Users/Employees
5. Step 5: Choose Users
   

Please see Figure 1.1 to understand the navigation better.

                                                                    Figure 1.1

2. Enabling 2FA for an Existing User

By selecting "Users," you can see its page with various fields.

Follow the steps mentioned below to enable two-factor authentication (2FA):

1. Click the Edit button as highlighted in Figure 0.1 for the user you wish to enable 2FA.

                                                                                    Figure 2.1

1. The form highlighted in Figure 2.2 will appear on your screen. 

                                                                              Figure 2.2

On the Edit User page, scroll down to the 2FA Enable setting.

1. 2FA Enable: In order to enable 2FA security, you need to toggle this setting to "Yes" on the Edit User page to protect the (User/Admin) account against unauthorized access.
   

1. If you disable this setting, it can only be re-enabled after 2 days.
   
2. A valid reason will be required at the time of disabling.
   

3. Control Center Login Using Two-Factor Authentication

1. When 2FA is enabled on a user account and you try to log in, a normal sign-in screen as shown in Figure 3.1 below pops up.
   
   
                                       Figure 3.1
   
   
2. When you attempt to sign in with your user credentials, the screen highlighted in Figure 3.2 below appears.
   
   
   
                                     Figure 3.2

1. Don't ask again for this device: Check the option that marks your device as trusted, so you won’t need to enter an OTP on future logins from the same device. It saves time but should be used only on personal, secure devices.
   

1. Login Using Different Credentials: Use this option to sign in with another username or account instead of the one pre-filled or currently active.
   

1.  A 6-digit OTP will be sent to the authorized email address.
   
   
   
   
                                                                    Figure 3.3
   
   
2. Copy the 6-digit OTP from the email. (see Figure 3.3 above)
   
3. Enter the 6-digit OTP in the Enter OTP field and click "Verify" (See Figure 3.2 above.)
   
4. Once verified, you will be securely redirected to the Control Center dashboard.
   

                                                                         Figure 3.4

Note: All user login sessions are recorded in the admin-level report under Admin > Admin Reports > Account Reports > 2FA Report. This report provides details such as whether 2FA is enabled, the date and time it was enabled, if it was skipped, and the corresponding account information.

                                                                                 Figure 3.5

• Related Articles

• Accounts

  What's the Purpose of Client Accounts in the System? "Accounts" can represent a Company/Customer/Manager or any individual who can access the system by authentication and authorization techniques. "Accounts" is one of the major modules in Control ...

• User Roles

  User Roles Overview User roles are set up to group permissions across multiple users set by the administrator, similar to how Employee Groups work. The permissions are inherited from the account and then passed down to the user in the end. This makes ...

• House Accounts

  House Accounts Overview House accounts are a simple and intuitive way of tracking customer sales, with options of giving them department-level discounts, cost and pricing discounts, an in-store charge tab, or pre-programmed tax exemption options. ...

• Pay In/Out Accounts

  Pay In/Out Accounts Overview You can create accounts for the cashiers' pay-in and pay-out activities from the POS. So, when the cashiers want to pay out for some activities, that must be recorded in the balance sheet or in the ledger account. The ...

• House Accounts List Report

  House Accounts List Report Overview Regular customers who repeatedly buy products from the store but need to pay the total balance at the end of the month or at a specific time interval can be added as House Accounts in Control Center. The "House ...