Authenticator app

Two-step sign-in with a 6-digit code from an app on your phone.

Required for tenant owners and for live API access. You'll be asked for a code when you sign in to the console and when you change API keys, webhooks, payouts or the payout account. No codes by WhatsApp.

Turning the authenticator off or resetting it counts as a security change and starts a 72-hour freeze. If you lose your phone and your codes, contact support to reset it after an identity check.