Users and sign-in security

Who can sign in, what they can see, and how sign-in is protected.

Roles

Every user on a merchant account is either an Admin or Staff.

• Admin can reach every area of the account and is the only role that can add users and change what Staff can see.
• Staff can only reach the areas an Admin has granted to the Staff role. A new account starts with none granted, so nothing is visible to Staff until an Admin opts them in.

Inviting someone

1. Choose Users in the top menu, then Invite user.
2. Enter their name and email and choose their role.
3. A temporary password is created and emailed to them. If the email cannot be delivered, the temporary password is shown on screen so you can pass it on yourself. They set their own password when they first sign in.

To change what Staff can see, open User roles from the Users page and tick the areas Staff should have, such as Transactions, Customers, Invoices, Scheduled payments and Support. On the Users page you can also change a user's role, Disable or re-enable them, and Reset password. Disabling a user stops them signing in without deleting their history.

Password and two-factor sign-in

Open the menu with your name in the top right corner. Change password asks for your current password and then a new one. Two-factor sign-in adds a verification code, so a stolen password is not enough on its own. We recommend it for everyone who can see transactions or customer details. If you forget your password, use the forgotten-password link on the sign-in page.

Each person can also add a mobile number under My phone, verify it with a texted code, and choose to get sign-in codes and alerts by text. If a text cannot be sent, the code is emailed instead, so you are never locked out.

New browsers and trusted browsers

When you sign in from a browser or computer we have not seen you use before, we may ask for a 6-digit code after your password, emailed to you (or texted, if you chose that). On the code page you can tick Don't ask for a code on this browser. That browser is then trusted for a number of days after each use. Only do this on a computer or phone that is yours, never a shared or public one.

To see or remove trusted browsers, open the menu with your name and choose Trusted browsers. Changing your password removes every trusted browser. If you did not expect a "new browser trusted" email from us, change your password straight away. Private windows, and browsers set to clear cookies when they close, ask for a code each time.

Staying signed in

A session lasts a limited time and quietly extends while you are active. You get a warning before an idle session ends. Sessions also end everywhere when your password changes, your user is disabled or your role changes.

The Terms and Privacy Policy

You are asked to agree to the Terms of Service and the Privacy Policy the first time you sign in, and again whenever either changes in a way that matters. A small correction, such as a typo, does not ask you again. If you do not agree, choose Sign out and contact your administrator.