Two-step authentication is an optional second sign-in step for Back Office users. With it on, a 6-digit verification code is emailed after the password is accepted, and the sign-in completes only once the code is entered.
Two-step authentication is off by default, and nothing changes until it is turned on. Each Back Office user enables it for their own account, whenever they choose.
Turning it on: A verification code is emailed to the account's address and entered once to confirm.
Signing in: Each code is valid for 10 minutes, and a new code can be requested from the code screen.
Turning it off: Requires the account's current password, and a notification is emailed to the account.
Change password
Available in the same settings as two-step authentication. Changing a password signs the account out on every device, so the new password is required everywhere.
Security email alerts
The account's email address receives a notification when the password is changed or two-step authentication is turned off.
Where to find it
Back Office → User menu (top right) → Personal settings → Two-step authentication
