[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"questions:item:en:why-two-factor-authentication":3},{"id":4,"title":5,"answer":6,"body":7,"category":77,"description":78,"extension":79,"meta":80,"modifiedAt":81,"navigation":82,"pairId":83,"path":84,"publishedAt":85,"question":86,"relatedPath":87,"seo":88,"seoTitle":89,"sitemap":90,"slug":91,"stem":92,"translationSlug":93,"__hash__":94},"questions_en\u002Fen\u002Fquestions\u002Fwhy-two-factor-authentication.md","Why Two Factor Authentication","The dashboard controls real money: refunds are issued there, payout details are changed there and API keys are created there. A password is the only barrier, and a second factor turns a stolen password from a disaster into an inconvenience.",{"type":8,"value":9,"toc":70},"minimark",[10,13,18,31,35,46,50,61],[11,12,6],"p",{},[14,15,17],"h2",{"id":16},"what-the-second-factor-protects","What the second factor protects",[19,20,21,25,28],"ul",{},[22,23,24],"li",{},"Payout details: swapping the bank account is the fastest way to divert a merchant money.",[22,26,27],{},"API keys: with them one can create payments and read operation data.",[22,29,30],{},"Refunds: mass refunds to someone else cards look like ordinary store activity.",[14,32,34],{"id":33},"why-a-password-is-not-enough","Why a password is not enough",[19,36,37,40,43],{},[22,38,39],{},"Passwords leak together with any other service where they were reused.",[22,41,42],{},"A phishing page collects a password just as easily as the real login form.",[22,44,45],{},"An infected employee computer hands the password over without their involvement.",[14,47,49],{"id":48},"what-to-do-today","What to do today",[19,51,52,55,58],{},[22,53,54],{},"Turn on two-factor authentication in the account settings.",[22,56,57],{},"Give employees individual accounts instead of one shared password.",[22,59,60],{},"Assign roles by task: an accountant needs no API keys, a developer needs no payouts.",[11,62,63,64,69],{},"How to handle API keys safely is covered ",[65,66,68],"a",{"href":67},"\u002Fen\u002Fquestions\u002Fhow-to-store-api-keys","separately",".",{"title":71,"searchDepth":72,"depth":72,"links":73},"",2,[74,75,76],{"id":16,"depth":72,"text":17},{"id":33,"depth":72,"text":34},{"id":48,"depth":72,"text":49},"security","The dashboard controls money and keys, so a password is not enough. What the second factor protects and why the whole team should have it on.","md",{},null,true,"question-38","\u002Fen\u002Fquestions\u002Fwhy-two-factor-authentication","2026-08-17","Why enable two-factor authentication in the dashboard?","\u002Fen\u002Fgetpayments",{"description":78},"Two-factor authentication in the merchant dashboard",{"loc":84},"why-two-factor-authentication","en\u002Fquestions\u002Fwhy-two-factor-authentication","zachem-nuzhna-dvuhfaktornaya-autentifikaciya","Gvgol-d1LPg9ByN5esZQWgJddCLRSTMomw6awfk-a30"]