Skip to main content

​
Overview

Changing on 10 October 2026. The Partner Portal is moving to passwordless sign-in — email address, then a passkey or a one-time email link. Two things change on this page: the email code option below is being removed, and a passkey signs you in without an MFA step at all. See Passwordless sign-in.
MFA adds an extra layer of security by requiring a second factor during sign-in.

​
Recommendation

Enable MFA for all partner accounts that manage:
  • Customer access
  • Domains
  • API keys
  • Billing (especially Stripe)
If you connect Stripe, we strongly recommend enabling MFA.

​
How to set up

  1. In the Partner Portal, go to Settings → Profile Settings.
  2. Find the Security section (password, MFA, passkeys).
  3. Click Enable MFA.
  4. Scan the QR code using an authenticator app (Google Authenticator, Authy, 1Password, etc.).
  5. Save your backup codes.
Your password, MFA, and passkey controls all live together under Settings → Profile Settings.

​
Signing in with MFA

With MFA on, signing in with a password shows a Two-Factor Authentication step afterwards. You can verify in one of the ways below — switch between them using the tabs at the top of the window.
Two ways of signing in skip this step:
  • A passkey, because it already proves both your device and you.
  • A one-time sign-in link, because following the link signs you in (since 30 September 2026).
MFA stays on your account either way and still applies wherever a password is used. See Passwordless sign-in.

​
Authenticator app

Enter the 6-digit code from your authenticator app. This is the default method.
Two-Factor Authentication window on the Authenticator tab, with a six-digit code field and a Verify button.

​
Email code (removed on 10 October 2026)

This option is being removed on 10 October 2026. Once sign-in itself uses a one-time email link, a second code by email is not a second factor — anyone with access to your inbox would have both. After that date, use your authenticator app or a backup code.If you’ve lost your authenticator app and have been relying on email codes, act before 10 October: regenerate your backup codes from Settings → Profile Settings → Security and save them somewhere safe.
Until then: switch to the Email tab and click Send Email Code — we’ll email you a verification code to enter.
Two-Factor Authentication window on the Email tab, offering to send a verification code to your email address.

​
Backup code

Lost access to your authenticator? Switch to the Backup Code tab and enter one of your 8-character backup codes. Each code works once.
Two-Factor Authentication window on the Backup Code tab, with a field to enter one of your 8-character backup codes.

​
Backup codes

Backup codes are a fallback if you lose access to your authenticator app. In Settings → Profile Settings, you can generate and download new backup codes.

​
Can I disable MFA?

You can disable MFA in Settings → Profile Settings in some cases. If Stripe Connect is enabled for your account, MFA is required and cannot be disabled while Stripe Connect is active — see the Stripe Connect doc. From 10 October 2026 this is enforced at sign-in: if MFA is not set up, you are guided through setting it up before reaching your dashboard. Setting up a passkey instead also satisfies it.

​
What the Security section looks like

Under Settings → Profile Settings, scroll to Security Settings. This is where your password, MFA, and backup codes live.
Security Settings section of Profile Settings — Multi-Factor Authentication marked Enabled, with Authenticator App and Backup Codes rows and a note that MFA is required while Stripe Connect is active.
  • Authenticator App — the second factor generated by your authenticator app.
  • Backup Codes — one-time codes to use if you lose your authenticator. Use Regenerate to create a fresh set.
  • If Stripe Connect is active, MFA stays on and can’t be disabled.