Two-Factor Authentication protects your Paddle account with an additional level of security. Also known as 2FA, this technology enables you to safeguard your confidential revenue, customer, and business data and block unauthorized users from accessing your account.

Setting up Two-Factor Authentication on Paddle

To set up 2FA, each user on your account needs to go to their User Settings page. You can use any Authenticator application on your smartphone or tablet such as 2FAS, Google Authenticator, or Microsoft Authenticator.

Users who installed the app and activated 2FA will be asked to enter the unique verification code created by the app each time they try to login in addition to their username and password.

By generating a one-time code each time you log in, you can be even more confident that your account is safe while mitigating the risk of a potential security breach.

What happens if one of our users gets locked out?

If the user is locked out or cannot access their Authenticator Application (e.g. lost their device or deleted the application), they will need to contact an Admin of the account to reset the 2FA for them. The Admin will need to go to the Team Members page and reset the 2FA for that individual.

How can Admins reset 2FA for a team member?

• Go to the Team Members page
• Identify the individual you would like to reset the 2FA for
• Click on the 3 dots located on the right side of the row
• Click ‘Reset 2FA’

You can refer to our Changelog for more details.

What happens if the Admin gets locked out?

• If there are other Admins: You should contact another Admin within your organization. They can reset your 2FA immediately via the Team Members page, just as they would for any other user.
• If you are the only Admin (or other Admins are unreachable): You should contact Paddle Support at sellers@paddle.com. Our Customer Support team will help you regain access to your account once we have verified your identity.

Can 2FA be enabled for all users on my account?

Yes, all users can enable and use 2FA to secure their account. However, Admins cannot activate 2FA for all users at once. Instead, each user needs to be manually activated.

Admins can check the "2FA Status" for all of their users on the Team Members dashboard page.