Two-step sign-in
Require a code by email on top of the password for everyone in your business — where the switch lives, what signing in looks like afterwards, and what to do when a code does not arrive.
Two-step sign-in adds a second check to a password: the person types their password as usual, then a six-digit code that arrives by email. It is off until someone turns it on, and it applies to the whole business rather than per person.
Turn it on
Open Settings → Modules & Settings and find the Security card.
Switch on Require two-step sign-in. It saves itself, like every other switch on that screen.
Owners and admins can change it. Drivers cannot, and it takes effect on their next sign-in rather than ending the session they are in.
What signing in looks like afterwards
Email and password, as before.
A code lands by email and the app asks for it. On a phone the keyboard offers the code from the email, so it is usually one tap.
Enter it and you are in, on whichever screen you would have landed on anyway.
A wrong code leaves you on the screen to try again. The code lasts ten minutes, and the screen counts down so you can see when it is about to lapse. Send a new code starts the sign-in again and issues a fresh one, with a short wait between attempts.
Signing in with Apple or Google is unaffected. Those already prove who you are through the account you picked, so there is no second code.
If a code does not arrive
Check the junk folder first, and check the address on the account is one the person actually reads. Leaving the code screen abandons the attempt rather than holding it open, so start again from the sign-in screen and ask for a new code.
If someone is locked out of the email on the account, an owner can switch two-step sign-in off, let them in, and turn it back on. There is no per-person exemption to hand out on the way past.
Last updated Sun Sep 27