Account security settings: How to enable two-factor authentication (2FA)?

Function Overview

Two-Factor Authentication (2FA) adds an extra layer of protection to your OneWarehouse account. When enabled, even if your password is accidentally compromised, hackers cannot log into your account using only your password, effectively protecting your order data and funds.

Why is it recommended to enable this feature?

• Enhanced security : Prevents unauthorized access and reduces the risk of data leakage.

• Anti-phishing attack : Without a second step of dynamic verification code, attackers cannot log in.

• Flexible verification : Supports three verification methods: App (recommended) , SMS , or email .

When will verification be triggered?

When you enable 2FA, the system will require secondary verification when the following conditions are detected:

1. When logging in on a new device or with a new browser.

2. When the system identifies a risky browsing environment.

3. If you haven't logged into your account for a long time, please log in again.

How do I enable two-factor authentication?

Step 1: Select Account Management

1. Log in to the OneWarehouse backend.

2. Click the "avatar icon" in the upper right corner > select [Account Management] .

3. Find the "Account Management" module on the page and select "Enable Two-Factor Authentication" .

Step 2: Select Verification Method

The system supports the following three methods. Please select the one that best suits your needs and click "Continue" :

• 📱 Identity Verification App (Recommended) : Use apps like Google Authenticator or Microsoft Authenticator to scan QR codes. This method generates verification codes even when your phone has no signal, making it the most stable and secure option.

Authenticator verification operation

Step 1 : Open the App Store or Google Play on your phone, search for and install the Authenticator app.

Step 2 : Open the Authenticator application and select " Scan a QR Code " to obtain the verification code.

Step 3 : Enter the 6-digit verification code displayed in the Authenticator application, and then click "Confirm and Enable".

*Note: A circular timer icon will appear to the right of the verification code . If the time expires, a new verification code will be displayed automatically.

• 📩 Email verification : The system will send a one-time verification code to your registered email address.

• 💬 SMS : The system will send a verification code to your mobile phone number.

Step 3: Complete verification and backup of the code

1. Follow the on-screen instructions to enter the verification code you received to complete the binding process.

2. ⚠️ Save recovery codes : After successful activation, the system will generate a set of "Recovery Codes" .

   • Please be sure to download or save a screenshot of this code!

   • If your phone is lost or you are unable to receive verification codes, this code is the only way for you to log in to your account.

How do I change or deactivate my certification?

Scenario A: Change the authentication method

If you wish to modify the verification method, please follow these steps:

1. Please disable two-factor authentication first .

2. After successfully disabling it, click "Enable Two-Factor Authentication" again .

3. Simply select the new verification method and complete the setup.

Scenario B: Disable two-factor authentication

If you need to disable this feature due to specific requirements:

1. Go to [Account Management] .

2. Select "Disable two-factor authentication" .

3. To ensure that you are the one making the operation, the system will require you to perform two confirmations:

   • Enter your login password .

   • Enter the current 2FA verification code (App/SMS/Mailbox).

4. Once verification is successful, the two-factor authentication function will be immediately disabled.

❓ Frequently Asked Questions

Q: What if I lose my phone and can't receive verification codes? A: Please select "Use Recovery Code" during the verification process on the login screen and enter the backup code you saved when you enabled the service. If you have also lost your recovery code, please contact customer service and provide proof of identity for assistance.