Two-step sign-in and your account security

Protect your Ellibo account with a code from your phone or email after your password. Set it up in a minute, trust your own computers, and keep backup codes for a lost phone.

Two-step sign-in protects every Ellibo app: POS, Accounting, Inventory, CRM and Subscriptions all use the same sign-in. After your password, Ellibo asks for a 6-digit code. Someone who steals or guesses your password still can't get in without that code.

It's free on every plan, and it's your choice to switch it on.

Set it up

1. Click your name at the top right and choose My Account, then go to Security.
2. Under Two-step sign-in, click Set up.

3. Choose how you get your codes:

   • Authenticator app (recommended): Google Authenticator, Microsoft Authenticator, Authy or similar. All are free, and they work even without internet on your phone. Scan the QR code with the app, then type the 6-digit code it shows.
   • Code by email: we email you a 6-digit code each time you sign in on a new computer. Click Send the code, then type it.
4. Save your backup codes. You get 10 of them. Download or print them and keep them somewhere safe (not only on your phone). Each code works once.

Signing in

1. Type your email and password as usual.
2. Type the 6-digit code from your app, or the one we emailed you.
3. Tick Trust this computer for 30 days on your own computer or the shop's counter PC, so it doesn't ask again there for a month. Don't tick it on a shared or public computer.

Other ways to get in, shown on the code page:

• Email me a code instead, if your phone isn't with you.
• Use a backup code: type one of your saved codes, like abcd-2345.

If a code is typed wrong 5 times, there's a 15-minute pause before you can try again.

Change, switch off, new backup codes

In My Account › Security:

• Change: switch between the authenticator app and email codes. You'll need your password.
• Get new codes: makes 10 new backup codes. The old ones stop working.
• Turn off: needs your password and a code.
• Trusted computers: see each computer you trusted, and Forget one (or all). That computer will ask for a code again.
• Password: change it. You'll need your current password.

We email you whenever two-step sign-in is switched on or off, and when your account is signed in to from a new computer.

Lost your phone?

• Sign in with Email me a code instead, or with a backup code. Then go to My Account › Security and set up your new phone (Change).
• Lost the phone and your backup codes, and you can't get emails? Write to support@ellibo.com from your account email. We'll check it's really you, then reset two-step sign-in so you can sign in with your password and set it up again.

For business owners: require it for your team

An admin can make two-step sign-in required for everyone in the business:

1. Open My Organization and click Manage (Organization Profile).
2. Under Security, switch on Require two-step sign-in for everyone in this business.

From then on, anyone without it must set it up at their next sign-in; they can't skip it. The card shows how many of your people use it already. Switch it off any time to make it optional again.