2-Step Verification for 7shifts Pay Products

Multi-Factor Authentication (MFA) is a security measure that enhances the protection of your 7shifts account confirming your identity beyond a username and password. By adding an extra layer of security to your account with 2-Step Verification, you're minimizing the risk of bad actors impersonating your identity. This article overviews 7shifts MFA requirements and how to enable 2-Step Verification in your 7shifts account.

What is 2-Step Verification? 

2-Step Verification is a security measure requiring users to verify their identity by entering a One-Time Password (OTP) sent via SMS. This ensures that only authorized individuals can access your account.

How to Set Up 2-Step Verification

1. Log in to 7shifts:
   • If 2-Step Verification is not set up, you will be prompted to enable it.
   • Or, from the 7shifts web app navigate to Settings > My Account > General > Login & Security > Enable 2-step verification.
     
   • If you are using the mobile app, you can only enable 2-Step verification when prompted (e.g., during the grace period setup prompt). To manually enable it outside these prompts, you must log in via the 7shifts web app.
2. Enter a valid mobile number:
   • Even if a phone number is already listed in your profile, you will need to enter it here to receive OTPs for 2-step verification. 
   • Selecting Skip for now will initiate a 7-day grace period. After that, you'll lose account access until you enable it.
     
3. Verify your phone number:
   • Enter the OTP sent to your mobile device and select Continue.
     
4. Save your recovery codes:
   • These codes are essential for account access if your phone is unavailable. You must confirm you have saved them to complete the setup.
     

Actions That Require 2-Step Verification

1. Logging In: Users connect to a 7shifts account using a 7shifts Pay Product (7shifts Payroll and/or Tip Payouts) will be prompted for 2-Step Verification at each login.
2. Performing Actions in Pay Products (including but not limited to):
   • Approving a payroll
   • Changing payment methods during payroll processing
   • Sending or editing Tip Payouts
   • Unlinking a bank account
   • Note: After successful verification during pay actions, sessions will remain verified for a specific period.

What Happens If You Don't Set Up 2-Step Verification?

If you do not complete the setup during the 7-day grace period, you will not be able to access your account or perform Pay-related actions until 2-Step Verification is enabled.

Troubleshooting Common Issues

I didn’t receive an OTP:

• Ensure your mobile number is entered correctly.
• Check your network connection and SMS inbox.
• Request the OTP again after a short wait.

I've lost access to my phone:

• If you lose your phone and are unable to receive your OTP via SMS, you can use one of your saved recovery codes when prompted for the OTP at login. 
• Once you have a new phone number, be sure to set it up for MFA in 7shifts. 
  • From the 7shifts web app navigate to Settings > My Account > General > Login & Security > Edit the phone number linked to your account.

I’ve lost access to my phone AND recovery codes:

• Contact our support team for assistance. Additional verification will be required to reset your MFA settings.

Can I Disable 2-Step Verification?

Users connected to a 7shifts account using a 7shifts Pay Product cannot disable 2-Step Verification. This security measure is required to protect sensitive payroll data and ensure secure access to financial information.