Security: verification codes and password recovery
How verification codes are delivered and when they're required, when extra verification kicks in, the recovery flow, and the two different password minimums.
Your account security rests on a verification code plus a check on the context you sign in from.
The verification code (OTP)
It is delivered by email only right now. The WhatsApp option appears in the interface but is "coming soon" and disabled.
The code can be resent after 45 seconds.
Extra verification
Signing in from a new device or a new IP address may require an extra verification step. This is deliberate protection for your account.
Password recovery
- Choose Forgot password.
- Enter your email address.
- Enter the code you receive, then set a new password.
Two different password minimums
| Flow | Minimum |
|---|---|
| Password recovery | 8 characters |
| Changing it from the Account Owner page | 10 characters |
Pick a long, unique password you use nowhere else — the store-owner account carries settings-write and billing-read permissions.