Online security is more important than ever these days, as more businesses rely on cloud-based services for everything from point-of-sale to email, banking and accounting.
Strong passwords are important here. (If you have something obvious like “password 1234,” it’s time to change it.) But it’s also a smart idea to enable two-factor authentication on your accounts, which adds a layer of security on top of your password to help prevent unauthorized activity.
What is two-factor authentication?
Two-factor authentication (also known as 2FA or multi-factor authentication) requires you to confirm ownership of two separate variables — your password and something else (usually a unique code) — to complete sensitive actions on your account.
Typically you receive a one-time code via email or text message (SMS) as an added verification step. You may have used an authenticator app (like Google Authenticator) that generates 2FA codes on your mobile phone.
Because the codes are different for every single request, two-factor authentication makes it a lot more difficult to hack your accounts (as it’s likely that only you have access to your email or mobile device).
Why is two-factor authentication good for my business?
At Square, two-factor authentication is required for your most sensitive account changes. For example, when you link a new bank account or reset your password, you are first prompted to log in with your username and password and then required to verify your identity with a one-time code sent to via SMS or with a code from an authenticator app to complete the action. This level of personalized authentication helps to secure your most valuable business details and information.
How do you enable two-factor authentication?
You can opt to enable two-factor authentication in the settings or security sections of most online services (like Gmail or Apple). In addition to the two pieces of information needed to make sensitive changes to your account, Square’s Point of Sale system also allows you to enroll in 2-step verification.
Once this feature is enabled, each time you log in to your Square Dashboard you’re prompted to enter your credentials (username and password) as well as a unique verification code sent via SMS.
How to set up 2-step verification for your Square account:
- Sign in to your Square Dashboard and go to Account & Settings.
- In Personal Information, click the Activate 2-Step Verification button.
- Choose whether or not you want to require employees to use 2-step verification, and click Next Step.
- Choose your 2-step verification method: SMS or Authentication App
- SMS: Add your primary mobile phone number and select Next Step. We’ll send you a verification code via text. Enter the code in the prompted field. Click Verify to complete.
- App: Scan the barcode with your authentication app and click Next Step. Enter the verification code from your app in the prompted field. Click Verify to complete.
- If you don’t want to enter a verification code every time you access your Dashboard, check Remember this device for 30 days in the Enter Verification Code prompt the next time you sign in.
Related Articles
Accept Payments from Your Computer with Square Virtual Terminal
15 Business Apps You Can Sync with Square
6 Ways Square Analytics Data can Help Your Business Grow
How do you enable two-factor authentication?
You can opt to enable two-factor authentication in the settings or security sections of most online services (like Gmail, Apple, and Amazon). In addition to the two pieces of information needed to make sensitive changes to your account, the Square’s POS system also allows you to enrol in 2-Step Verification.
With this feature enabled, each time you log in to your Square Dashboard you’re prompted to enter your credentials (username and password) as well as a unique verification code sent via SMS.
Two-factor authentication can come in many forms. Once you log in with your password, you may be prompted to verify your identity in these ways:
- Biometric authentication such as Touch ID or Face ID
- Authenticator apps
- Email authentication
- A physical security key
- A generated authentication code
- An authentication code you’ve programmed previously, such as a pin code for a bank account
What is the difference between two-factor authentication and multi-factor authentication?
Both two-factor authentication and multi-factor authentication add a secondary layer of security to your accounts. Two-factor, as described above, includes two layers: a password and a second step of verification in order to login. An account with multi-factor authentication would require two or more steps of identification in order to log into an account. For example, you might use a password to log in, receive a one-time code, and also use a fingerprint. Two-factor authentication is a form of multi-factor authentication but the distinction lies in the latter allowing for additional layers of security beyond the two points of identification.
Multi-factor authentication methods can be categorized as:
- Knowledge factors: Pieces of information you might already know, such as a username and password combination, answers to a security question, PINs, or the CVV on a credit card.
- Possession factors: Physical objects you would own, such as a USB token, mobile phone, wireless tags, card readers, or a physical key.
- Inherence factors: These are things you would have and are unique to you. Biometric authenticators like fingerprint readers or voice recognition would be considered an inherence factor authentication method.
How to set up 2-Step Verification for your Square account:
- Sign in to your Square Dashboard and go to Account & Settings.
- In Personal Information, click the Activate 2-Step Verification button.
- Choose whether or not you want to require employees to use 2-Step Verification, and click Next Step.
- Choose your 2-Step Verification method: SMS or Authentication App
- SMS: Add your primary mobile phone number and select Next. We’ll send you a verification code via text. Enter the code in the prompted field. Click Verify to complete.
- App: Download your authentication app (such as Google Authenticator, Microsoft Authenticator, or Authy), scan the barcode into it, and click Next Step. Enter the verification code generated from your app in the prompted field. Click Verify to complete.
- If you don’t want to enter a verification code every time you access your Dashboard, check Remember this device for 30 days in the Enter Verification Code prompt the next time you sign in.
If you required 2-Step Verification for team members, they will receive an email with instructions on how to complete setup. If they do not turn on 2-Step Verification after reading the email, they will be required to the next time they log in to their Square account. If you don’t want to enable 2-Step Verification for your whole team you can still follow the steps above and turn the feature on for employees on an individual basis.
Learn more about how Square protects your business with Square Secure.